C:\Documents and Settings\star\سطح المكتب\iv4.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f5699db9eb41de38e7423a505ec23c4f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f5699db9eb41de38e7423a505ec23c4f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5699db9eb41de38e7423a505ec23c4f_JaffaCakes118
-
Size
664KB
-
MD5
f5699db9eb41de38e7423a505ec23c4f
-
SHA1
abb55c44a4957cec071e014b4cd61188430a6791
-
SHA256
fab7b34854920fe44f7ba3b75669c4fd688c9ddb31cffbf3a2c0a8a869edb067
-
SHA512
b0dc8d3b9324fa5e5dc7382c1d67370fe497ec94506cb803cdeb3d466256f43ab544e6a7a3e20460110ea26083eeac27fc9f0015fcd351b6765491bfdfb177d4
-
SSDEEP
12288:B03lRqQUzoaD0XtJT2emy/ky5HgB2B8Q1gn5/cTS8Nmq:IlRqQc09JToy/ky5Hgy8QWlzeR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5699db9eb41de38e7423a505ec23c4f_JaffaCakes118
Files
-
f5699db9eb41de38e7423a505ec23c4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 527KB - Virtual size: 526KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ