C:\Documents and Settings\mochi chchi\Local Settings\Temp\p0nk3up3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba5dbd090abe04cbeaefa3520e768982_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba5dbd090abe04cbeaefa3520e768982_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba5dbd090abe04cbeaefa3520e768982_JaffaCakes118
-
Size
760KB
-
MD5
ba5dbd090abe04cbeaefa3520e768982
-
SHA1
6a04765ecb32537e327a7249911d8c26f1c81332
-
SHA256
322159c2d897c5701fbff25d04925642d627f647b3a4ff736af98ac1e5e51fa0
-
SHA512
d49e276012680c512c7d1973462101f409fccb1d58070bcc468151dd8319979d3842fbe0d6d0237c775e3e03a3aba8f0aba8073104c8f43b47d0bb278dc8b3ae
-
SSDEEP
12288:Pj6alGEPhLg4u+DdsolWFhuAhaXh/MJ8q9RSRc2QjEyJy6dr:PdvJg43mHr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba5dbd090abe04cbeaefa3520e768982_JaffaCakes118
Files
-
ba5dbd090abe04cbeaefa3520e768982_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 716KB - Virtual size: 714KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ