C:\Users\alomhack\AppData\Roaming\Microsoft\Windows\Templates\??c4????L.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fafed3a14d875355e5eea0bc5ab54c17_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fafed3a14d875355e5eea0bc5ab54c17_JaffaCakes118
-
Size
920KB
-
MD5
fafed3a14d875355e5eea0bc5ab54c17
-
SHA1
ab58e8316d6eef00036808fd529a0add949e17cd
-
SHA256
4a09caa7fc0ed89d783bd9eca26393b370377db7e762204e38e93ce40abd3d7e
-
SHA512
b5f64f93522f5268b73d869c1dc98345c925c010728de14998cced06f58f393d266e1059eaafa22e9463ac25716cb4b54ad035adf48941bfe54a26d633a2715a
-
SSDEEP
12288:ePWprTLJY9u9aj41NuapFfdBpNMBbb1HVXIGywoKYAUhgiJz0/koSG9UYq9TBd4S:ePVu9l1Nui9JNEbrxUmVrSLYUd474mfC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fafed3a14d875355e5eea0bc5ab54c17_JaffaCakes118
Files
-
fafed3a14d875355e5eea0bc5ab54c17_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 690KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ