C:\Users\CORPORATION\Desktop\tools\tools\11.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d0dc1dd6d6cc83a49e1549bf0c0d8288_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0dc1dd6d6cc83a49e1549bf0c0d8288_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0dc1dd6d6cc83a49e1549bf0c0d8288_JaffaCakes118
-
Size
273KB
-
MD5
d0dc1dd6d6cc83a49e1549bf0c0d8288
-
SHA1
6f63f2703d1a1919d98f13406698443677593c3d
-
SHA256
427edd3fffa274438bd94bb00a63ec8284725511b1830e1cbf2b35cb6861c67e
-
SHA512
1e29dae29d0e8dcac75a4ebe11d0f694ac895a7b8beab7f6fc2a8a219fdc1dbaf39b8221edef05febababf4c85441a680338287d8d285543627e4bdca96137f2
-
SSDEEP
3072:KG85bhZcBIBD0uc/8wnRrrZLYN+GVStJf8Yzq+96GM3lFkIZ2lh/iPXWtY67kXUa:KG8XZPN0u8nVVL9lfp7kXUildysCgElK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0dc1dd6d6cc83a49e1549bf0c0d8288_JaffaCakes118
Files
-
d0dc1dd6d6cc83a49e1549bf0c0d8288_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ