d:\Download\test123\3434\Release\3434.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d6adcfb79ed3193704e90834af0ff603_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6adcfb79ed3193704e90834af0ff603_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6adcfb79ed3193704e90834af0ff603_JaffaCakes118
-
Size
270KB
-
MD5
d6adcfb79ed3193704e90834af0ff603
-
SHA1
b33fa1fcab555ef2d07d88c57f95bdc4593f0134
-
SHA256
2b030ce7bef81384f924c43fd3b2b5cda28cde8d3b3df68b444fa6ea5758ba62
-
SHA512
c440db79f09bd3b177cbbf5ff9aeb43f777244d8b07a91010fa9f1434df5c5168317a2e2609a9ccbadb4b4f029362c3010ffe0a47844784912cdbecab63fa182
-
SSDEEP
3072:+zJktbSENFvx0HPaeXseTbCbXRg9j3f0gKvzCrsWdoXz1fm1noSCgcg8Z+6HSGRv:+zJktbjNFWbcePCbXoGCYu1no+4y8y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6adcfb79ed3193704e90834af0ff603_JaffaCakes118
Files
-
d6adcfb79ed3193704e90834af0ff603_JaffaCakes118.exe windows:4 windows x86 arch:x86
5034146808fabf9c0f0b9080bdf1395f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FreeEnvironmentStringsA
GetModuleHandleA
_lclose
_lread
_lopen
GlobalAlloc
GetSystemTime
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
Sections
.text Size: 4KB - Virtual size: 621B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 462B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ