C:\Users\Martin\Music\penischild.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fed62f18b8f0aca58596014b4faf3270_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fed62f18b8f0aca58596014b4faf3270_JaffaCakes118
-
Size
820KB
-
MD5
fed62f18b8f0aca58596014b4faf3270
-
SHA1
551c89483f925ce2ca3020c9ac3a7d0f7d453ee1
-
SHA256
20604f1b548043558e282ea1b410e8ee4ef4e1d3de204d0c6854217e0122c79f
-
SHA512
614ada3b666b4fbd2088d17d3b84c87815bb59a581b1819bf0db8db61edf3661c28d7079f1ff16d6efab71802df2dafb70878e2ecb4ea6a1dbb57e87b9c35e8c
-
SSDEEP
12288:YC2HyyhNd3orG6tPXDR3i4C+DBmEXBPX9reTSV0RM0R4p:YTSMXYtPXDRy4zzgTY0RM0K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed62f18b8f0aca58596014b4faf3270_JaffaCakes118
Files
-
fed62f18b8f0aca58596014b4faf3270_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 708KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ