C:\Users\USER\Documents\Visual Studio 2010\Projects\T\T\obj\x86\Release\T.pdb
Static task
static1
Behavioral task
behavioral1
Sample
97150d331853f8c217a0a53de0be25f4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
97150d331853f8c217a0a53de0be25f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
97150d331853f8c217a0a53de0be25f4_JaffaCakes118
-
Size
764KB
-
MD5
97150d331853f8c217a0a53de0be25f4
-
SHA1
efc12e120d83eb09c95939623dd600b3e6c5a271
-
SHA256
b9b3daa4cdda7d5485bd7adda1dcac5c5dc9d092e9abcf0055a94acd601cb39d
-
SHA512
6befc274f7fc5b0dd5cb527285d2546c88280cb22565937fabc2d30982b85e1c158d26aaff5b6371e78e6458d0ca5aa41abcf665db8e7ad1214cd1f5dea9d887
-
SSDEEP
12288:y+lqbN8T8mELhlPb+36tTP5+BHzFo9504Js1U0eA915X1T0KnJv330B:NKY36tTaFoTU6A9SKJv3EB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97150d331853f8c217a0a53de0be25f4_JaffaCakes118
Files
-
97150d331853f8c217a0a53de0be25f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 761KB - Virtual size: 761KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ