C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\Image Worm Stub\Image Worm Stub\obj\Release\IWStub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
96b5d26e564651860d29dbc235dd7b22_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
96b5d26e564651860d29dbc235dd7b22_JaffaCakes118
-
Size
47KB
-
MD5
96b5d26e564651860d29dbc235dd7b22
-
SHA1
cf62207fd9966342959580add43dfb3b4862f3a2
-
SHA256
6eef0dcd20d5e51325b82c04a6db67d23fe8dd545192947e1ec12d046d0d56d4
-
SHA512
3e2c23fac5e68cebba08fc2d1679cf79ee2898b5a875b8d828a27372e1d000bcc857fea48377465dc6f3b5a5582445900ba7c144b917ad371f45f3d02f19caee
-
SSDEEP
768:W79emJdmo6WSROFmZ6kzYcCefMuzEblTO4NVdRbcXY/mRIUTRSa7Umhvs:2tmopF12fki4DcxRpSk0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96b5d26e564651860d29dbc235dd7b22_JaffaCakes118
Files
-
96b5d26e564651860d29dbc235dd7b22_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 179B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ