C:\Documents and Settings\1337\Bureau\ownz 1.6 src\1.7.6 src\bb1\bb1\obj\Release\WindowsUpdate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118
-
Size
5.6MB
-
MD5
a5678f3a7ee0903dc9d4fcb52821ef04
-
SHA1
b1819407654eb379f1681c2037f9d70b1e93eb77
-
SHA256
ffc0a242e73653e7b487be3f970538cc05bab897ebc53488aa7243a92938e9e5
-
SHA512
db268a743e520cc9c7aebc46f0105c821133dd1e69670d9501b24f76d3d512cd23c67584eb8bc4d64bf0a4c267e019e44606cca12c96ce90359ef47f2ebfeb39
-
SSDEEP
49152:H5udYaK8MJC9e8FXvMon4eFXH2H+o/Hw9wtaddtJAqsJnDpFDBUq6SRLGTnA:YdYaK8+C9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118
Files
-
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ