C:\Users\Phil\AppData\Roaming\Microsoft\Windows\Templates\WØ4aø.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bc3b221b98dcbff5fe8783082935434e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc3b221b98dcbff5fe8783082935434e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc3b221b98dcbff5fe8783082935434e_JaffaCakes118
-
Size
184KB
-
MD5
bc3b221b98dcbff5fe8783082935434e
-
SHA1
77aa6e75e04604a46768425fd453a145aed5b75d
-
SHA256
a7d9a67252a43e501f380f8743100ba9ef058b359ad6ff364999139604952822
-
SHA512
9b12e7dc91bc48bdb4bd5f0311b6f973c1b096fa56e09f82e144be8c67eb83419955ede32b3e4443502414fefa1410582c550406290409be903c180a2b9c2db9
-
SSDEEP
3072:Bhn/4bR3o2QZZgU+9XfCENCzhEu4XzNaRI65doFBVC5KJ46:Bh6Zo2QZZgffNCzhp4XzNaSw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc3b221b98dcbff5fe8783082935434e_JaffaCakes118
Files
-
bc3b221b98dcbff5fe8783082935434e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 122B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ