C:\Users\remve\AppData\Local\Temp\5lnuagc4.pdb
Static task
static1
Behavioral task
behavioral1
Sample
def14c2d041e155ca9568d7b2f0741df_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
def14c2d041e155ca9568d7b2f0741df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
def14c2d041e155ca9568d7b2f0741df_JaffaCakes118
-
Size
996KB
-
MD5
def14c2d041e155ca9568d7b2f0741df
-
SHA1
a35c87e949c344fb019376b5e00398f4eb2db6ca
-
SHA256
eb01a3b6715369f764ad41bef290740525dc4245d92ca2bcda871311f4f64533
-
SHA512
f10c7185f12b5e51ee82ded19e58303b126cee754232ce00bb0aba5f72286570f00495e863733ec52b16bb1cfd02d4c9b7492df46b8b60bc06db73b8e5ddba74
-
SSDEEP
12288:Uwgr7jU6MB4tCKRKp+mVzTI9iT79yX54NT+ZOc:UwXBwKp760ByX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def14c2d041e155ca9568d7b2f0741df_JaffaCakes118
Files
-
def14c2d041e155ca9568d7b2f0741df_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 820KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ