D:\work on it final\cambridge\cambridge\cambridge\obj\Release\cambridge.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fce9b56cdd4d3122f3a7dc6a907d8c5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fce9b56cdd4d3122f3a7dc6a907d8c5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fce9b56cdd4d3122f3a7dc6a907d8c5a_JaffaCakes118
-
Size
1.3MB
-
MD5
fce9b56cdd4d3122f3a7dc6a907d8c5a
-
SHA1
ebe88af4d5c8a8d7da2daa218b21b34e58fdcc37
-
SHA256
86cf4b9b23ee85f78ba3324665633444772a33a7f7d25f463a06d9d56bd0f816
-
SHA512
94f6cdbe25f1937fa8260de3bce1d716f9e225d5236293ed03f55ad8d95a7207050cd9e0d85538f31a6c7aa359e1eebe9d03fb551ba24f4a719f5e11b5a554b2
-
SSDEEP
24576:tlzelnCjGZG+WNYEP7yt0CVGRQwAkC4EQ6Vw1we3zi2B8Ol1hlyJ5:rylnZGBzjMboRQlkC4EQ6iwSb1hED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fce9b56cdd4d3122f3a7dc6a907d8c5a_JaffaCakes118
Files
-
fce9b56cdd4d3122f3a7dc6a907d8c5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ