D:\Ahmed\New Folder\تشفير\08.10.1432_165759.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b93abca65c37e8764a6511fef7fbfd38_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b93abca65c37e8764a6511fef7fbfd38_JaffaCakes118
-
Size
509KB
-
MD5
b93abca65c37e8764a6511fef7fbfd38
-
SHA1
57a0252dd6691a1261d756571bcc0bb442fa20ec
-
SHA256
214e767cd98c865ada1f1fd61a9361f3d107cda8d85157685b35f09d68dab5d3
-
SHA512
eadfa733a2339b0fea47f9abe9360adbd7be6a6fe3bf209393058103ae71002e7795be4ea2f0161fb959254a11e6749ded5d841f34402bbea8816d05aa34bd1a
-
SSDEEP
6144:e0IJv7NN6jqCcn3leGOReiEmUyN1FsmSsPkOPJqHr2cDHzjdv2wd8FDnuWQCmxw:nIJvTCYyeij1KLEkwJqpxoFDn3ux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b93abca65c37e8764a6511fef7fbfd38_JaffaCakes118
Files
-
b93abca65c37e8764a6511fef7fbfd38_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ