c:\Users\user\Documents\Visual Studio 2013\Projects\Office\Office\obj\Debug\Office.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e051d24f412df43ff14a7e7b268dfdc1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e051d24f412df43ff14a7e7b268dfdc1_JaffaCakes118
-
Size
69KB
-
MD5
e051d24f412df43ff14a7e7b268dfdc1
-
SHA1
4ce635c9ce06647ffcbd1fc5988ba3021970e770
-
SHA256
c3bc66ce2854cb0d876064d9db6f914954b627183d7707c10b6c704fe8bc0d0a
-
SHA512
1f0fb3571fd006190c66cac9667268187d751cd2b2ab025de61ce59ed4b00fb4a1068cd70585a4513782b1da7f5d3e3b15b4c80f6b948feafe0084cdea6126bf
-
SSDEEP
768:4T7zzabcv30NuMkNNe1ZV6ieZopVqYU/9++WdoOkG5OoySP9SpcL1GbNg2sZ9K4x:ZjKaM/g+WuVpcL1GbNg2sZ9WmbF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e051d24f412df43ff14a7e7b268dfdc1_JaffaCakes118
Files
-
e051d24f412df43ff14a7e7b268dfdc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ