SetRegNI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c8b793af4231a78a5e0d179e2877da86_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8b793af4231a78a5e0d179e2877da86_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8b793af4231a78a5e0d179e2877da86_JaffaCakes118
-
Size
104KB
-
MD5
c8b793af4231a78a5e0d179e2877da86
-
SHA1
73f59cbaf9f0ea598d4fe97cba81f0d210cb472b
-
SHA256
71bd812ee2dfdd42b2bb5a555b19e06721b43b7ece3249f56c467b0ec2bb23b9
-
SHA512
25c8f741b29b3e709c9463f4fe6d1565a59f30a65d2c8ba2eaa6261afa00b2863c5a054da639613d27f10397d5edbe8ae3772fc8b04bad69e70b3cd90452fad0
-
SSDEEP
1536:2GRyvcjg5blYo13yZUtyw/YbIv52tfakGBncU:2GgvFbhynwzEtfapZcU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8b793af4231a78a5e0d179e2877da86_JaffaCakes118
Files
-
c8b793af4231a78a5e0d179e2877da86_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE