C:\Documents and Settings\Admin\سطح المكتب\DozeN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bfe3a53f5b6e7b958963ef10e0a7cf81_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfe3a53f5b6e7b958963ef10e0a7cf81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfe3a53f5b6e7b958963ef10e0a7cf81_JaffaCakes118
-
Size
174KB
-
MD5
bfe3a53f5b6e7b958963ef10e0a7cf81
-
SHA1
bc373f1ad09ecf9fcc9387ef960a83a0d939f3d9
-
SHA256
22a98348eb53f13d2f2ac33b58cfd0cfb5073e8960455fc93ec7c5369f0b990b
-
SHA512
bb35d5bbeeb728bd54618285f022ac10d984b90b3052bba579ee7c4e29b8dcac6e1a963fe122ddc264e026dbe24022e65bb6c0272f0399597c5d166b3427a618
-
SSDEEP
3072:ub/HhxqfuIG9Byz1ctBCdMuUDF3S4eGc0ObzXcR40Eb8HO:a9PBCdMxtHeGcnsR40Xu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe3a53f5b6e7b958963ef10e0a7cf81_JaffaCakes118
Files
-
bfe3a53f5b6e7b958963ef10e0a7cf81_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ