C:\Documents and Settings\H.BuRaK KeSKiN\Local Settings\Application Data\Temporary Projects\WindowsApplication1\obj\Debug\WindowsApplication1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8e5e964bd58d041dc6260e26049d490b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e5e964bd58d041dc6260e26049d490b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e5e964bd58d041dc6260e26049d490b_JaffaCakes118
-
Size
73KB
-
MD5
8e5e964bd58d041dc6260e26049d490b
-
SHA1
930fd5cb50eb8763130f60e0ec7bac31ad60ffc4
-
SHA256
14800711586575dcdcee7da5a1d6e9fb6b7c2773c958c1f5ff5528dfddacd42e
-
SHA512
c347c71726318732ba12f49b953ff4e77ab021e7d6490cb6810ef39d50194fd36776d6efc2f7fe80c803dae21a6dc04c56ae963daf32a13acb44017b1c939b95
-
SSDEEP
1536:IfUpSSsQzdDUou7jMwBBjveb7D5fdLrRWLU6IPN+twVi23KBY20:OU2QzdDUlMwBBjvS5fdxWLHIPgKs26Bs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e5e964bd58d041dc6260e26049d490b_JaffaCakes118
Files
-
8e5e964bd58d041dc6260e26049d490b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 198B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ