C:\Documents and Settings\yasser\سطح المكتب\sddee.pdb
Static task
static1
Behavioral task
behavioral1
Sample
83e4d77a51b62637c33fac16c55f46a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83e4d77a51b62637c33fac16c55f46a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83e4d77a51b62637c33fac16c55f46a8_JaffaCakes118
-
Size
258KB
-
MD5
83e4d77a51b62637c33fac16c55f46a8
-
SHA1
10de76ac80b9871c28e9ed9312898ec2b087a682
-
SHA256
e97ccbdb7709e20a2e2d81b319e21a3051e0cae209cf504556a39738331255db
-
SHA512
c6c8554a759df0d807bdb234e8597a76a94b7191568088d4dbe0d659d9a8fa3cb02be26a95b1e6def90e3f96e9c831725d3bd19b35728b8e802dce29f8360e9d
-
SSDEEP
6144:KMcXeNo8EkoxRHf+jvdrGKurWxaZz0/Sz6bH:KZuo8Ek4hXZz0/Sz6b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83e4d77a51b62637c33fac16c55f46a8_JaffaCakes118
Files
-
83e4d77a51b62637c33fac16c55f46a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ