C:\Documents and Settings\المبدعون\سطح المكتب\122.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a20ff7022ffdf3ab62a91f32d3146da9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a20ff7022ffdf3ab62a91f32d3146da9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a20ff7022ffdf3ab62a91f32d3146da9_JaffaCakes118
-
Size
287KB
-
MD5
a20ff7022ffdf3ab62a91f32d3146da9
-
SHA1
3edf42e2d50cff1bfd7f493be673af9e4e66124e
-
SHA256
d7a7aa3df0192d3cd7ff14f425ac5c2a53cf198518a914dae4913720eb0569db
-
SHA512
573c3d295b50a8cb4f62753aacf9bc0f012e701d31f7a94a16eaae75d65f2e0fdadae8b165290db6d6c1ce398a68cb808f7540f3839da743fc1c470efb7b3ac7
-
SSDEEP
3072:hpZVkrGfiy4vjtnI+YPZ/JW+zClfp1hS9FYb0eFIk6Lc854Ih8JRZ2CaDUyW8vf/:hLVkkizva+8/JvyS92YeF2c8e95U9kg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a20ff7022ffdf3ab62a91f32d3146da9_JaffaCakes118
Files
-
a20ff7022ffdf3ab62a91f32d3146da9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ