C:\Users\MED\Desktop\tools\claine.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c8480d7dcdefef4d6ef864a5c4089157_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8480d7dcdefef4d6ef864a5c4089157_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8480d7dcdefef4d6ef864a5c4089157_JaffaCakes118
-
Size
261KB
-
MD5
c8480d7dcdefef4d6ef864a5c4089157
-
SHA1
32c5a1755594f2b24da2d2d4c32262cf7de837f9
-
SHA256
a72810dc3b4891538296d932a7b73649b5e589c645ade6c9857bb15dfd8ea892
-
SHA512
b63245a3d5fd69b41c7905e5fee8aa2b25b67ce7aa3ba1f9d13719eb3a6c6585d065c9776a772374a321b56cdc140f6a619300ace730267f7511aa85df40d119
-
SSDEEP
3072:tB6TNxNDCfmpFBMDH2WNAFdNmYejvccWxSOERgKZ51kyjb0IqEJPsKjvbcQ1+9mt:tB64OpFBMDSdS7gK5VqkdjIWS6IYkX58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8480d7dcdefef4d6ef864a5c4089157_JaffaCakes118
Files
-
c8480d7dcdefef4d6ef864a5c4089157_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ