C:\Documents and Settings\1337\Bureau\src private 3.1.0\phoenix\phoenix\obj\Debug\lolo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b70493f3c31d0c138f0b6c20a2e7f8cf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b70493f3c31d0c138f0b6c20a2e7f8cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b70493f3c31d0c138f0b6c20a2e7f8cf_JaffaCakes118
-
Size
74KB
-
MD5
b70493f3c31d0c138f0b6c20a2e7f8cf
-
SHA1
932b6fa7b5f1b6ce488a6928a1d4e6d97923d239
-
SHA256
15e14a1864d1e703ac5ba1d6dfe377a99ff4ee5f69ce5166795595b52d36349a
-
SHA512
37babe71242ece286d3f09d1ad63807a93cd9d8d600dc385cc175bfa8b14fc9617a82e55c96368dac28860b9548ac4822e34690770b791ae2a185c34175d2b8b
-
SSDEEP
1536:4do1RQTxghDFpvTlL/IlXZWnoka5YPDpUWaRTcPM6iExp:4doYTx8FbkOl0YPdUWbMNEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b70493f3c31d0c138f0b6c20a2e7f8cf_JaffaCakes118
Files
-
b70493f3c31d0c138f0b6c20a2e7f8cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 143B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ