C:\Users\hex\AppData\Roaming\Microsoft\Windows\Templates\a????8X????x1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d132f0ddbfb5c89aecdfb4db1abf9551_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d132f0ddbfb5c89aecdfb4db1abf9551_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d132f0ddbfb5c89aecdfb4db1abf9551_JaffaCakes118
-
Size
73KB
-
MD5
d132f0ddbfb5c89aecdfb4db1abf9551
-
SHA1
d602756bb7f53d18a8c4a083039e306cccb8327c
-
SHA256
1e924f2169c1f24cdaccb5f8a5e63cd07bf189514b8a9846e9cf8cc9bec9c50b
-
SHA512
2dad38dd1e4cbaf6d8eb6e9c778fc3221b13adae1bd27aec60ec74c82c9a4062c370e3bfe1e2bc7d8cba61232529bb115c300658685a62d0865a9a454f2709b5
-
SSDEEP
1536:Ag5YYNU8+3HHop4P9qBH2kaXR6QF7eWUu4ZaZP6nJ4a34rsVu:AiU86odQHh64y4P6J4rMu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d132f0ddbfb5c89aecdfb4db1abf9551_JaffaCakes118
Files
-
d132f0ddbfb5c89aecdfb4db1abf9551_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ