C:\Users\rochdi\Desktop\ll.roch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c1f2ec36cea3e7ec54a666565758b8fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1f2ec36cea3e7ec54a666565758b8fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1f2ec36cea3e7ec54a666565758b8fb_JaffaCakes118
-
Size
779KB
-
MD5
c1f2ec36cea3e7ec54a666565758b8fb
-
SHA1
64b99cd65d00872fcfd5d1a1bb28039fd82368cb
-
SHA256
cd39942b07a63af9b8d076dc39e435a24f5a9023c8b2357cad6f908186ebe1f4
-
SHA512
44706569fccfa21a5242c834b311b193f562285d048a62a1dbedc7ed54f021e9745119be6eaa5ea10090effe35230f49d64aff90f195415e94dbfa4a8f7321bd
-
SSDEEP
12288:9TCvrMu3JoeeujRkqK3+1LPg5ySKk1d37F1AGqXbtu7mT+TPsK74WRCoKfOoiUvM:9TCTDCuNkqkx/DrFSbbtjurIN2ojy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1f2ec36cea3e7ec54a666565758b8fb_JaffaCakes118
Files
-
c1f2ec36cea3e7ec54a666565758b8fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 633KB - Virtual size: 633KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ