e:\code\pichange\piprotect\Release\piprotect.pdb
Static task
static1
Behavioral task
behavioral1
Sample
79151e9cc3713ed1860e434f74544765_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
79151e9cc3713ed1860e434f74544765_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
79151e9cc3713ed1860e434f74544765_JaffaCakes118
-
Size
10KB
-
MD5
79151e9cc3713ed1860e434f74544765
-
SHA1
67cb146629ecae1626d924d458d5027a7d67c8b6
-
SHA256
bf0c6217b77603de601db546d540766311783f7540f77d108f90027f481ef056
-
SHA512
04f8b7d4ddf5314301a6dbebd2503e1787619bda7a96058e9e4ab12f57b5c6e07e4ff5457429bc7761d3442f14d0c96e06346f80f150607951bc4514a70db5ec
-
SSDEEP
192:YmG9sFYCwA5ArW5riqGEU2V2kjIu44aejRvfZzHigDgvlS4cqu:5FY25ArW5riqTU2gkvH99H9j4cq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79151e9cc3713ed1860e434f74544765_JaffaCakes118
Files
-
79151e9cc3713ed1860e434f74544765_JaffaCakes118.exe windows:5 windows x86 arch:x86
a075c5ab7dfaec82d620e16cc5ddfc44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
GetModuleHandleW
GetCommandLineA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ