e:\QQPCMgr\Basic\Output\BinFinal\QQPCMgr_tz_Setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d9a8e95732ab27cf45c542ee25078362_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9a8e95732ab27cf45c542ee25078362_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
d9a8e95732ab27cf45c542ee25078362_JaffaCakes118
-
Size
865KB
-
MD5
d9a8e95732ab27cf45c542ee25078362
-
SHA1
daa3859744ad48e72b870342561a7f60a0b1faf6
-
SHA256
8b019539889b3cbdb004b2992861e06ae27681cd9f5c6c1f3505192b682c3ed6
-
SHA512
264a0fff419ab2f3c6ef19cc6a5781e33cb169ee9f0b6c422f14a321215b8c7d0543f99960f3884d7bed6119994b6cab7d695c6907a58dcc9e7dc7e6359bf2d6
-
SSDEEP
24576:MIlXYgWOZ61cG5g0TjceqlGz3Yv6FEBuENO9/GX:MIlWOZ6+kJTAlS3Yv6FGNE/GX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9a8e95732ab27cf45c542ee25078362_JaffaCakes118
Files
-
d9a8e95732ab27cf45c542ee25078362_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 368KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gda Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE