c:\xampp\htdocs\crypting\pfwnHn5zjlfXHgep\PIKgbN3mJ6P1VJi8.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ff9e9d05caf462f58aad45eb1ad5ef33_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff9e9d05caf462f58aad45eb1ad5ef33_JaffaCakes118
-
Size
765KB
-
MD5
ff9e9d05caf462f58aad45eb1ad5ef33
-
SHA1
c3b1a3bb8c707c811fcbae78135bdf99e9aa29ae
-
SHA256
34b7919ce432fa1bf2af7e1079f5b4552ec63cfb72d08a3246bb319093ea26fc
-
SHA512
23345c088056a641915b1a60fb0139ff076474c1bd8b9f8da6b946234121081b34cdb059d6d38ee93d31f1192d1386349539c987268005bc7caf0e629b1a74fa
-
SSDEEP
12288:1TQpp5imtuIkU2h1mewId8rM+2A5v9PDrMKpiCUpiz80d+AXHL:nQbrdvqBtWXL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff9e9d05caf462f58aad45eb1ad5ef33_JaffaCakes118
Files
-
ff9e9d05caf462f58aad45eb1ad5ef33_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 499KB - Virtual size: 499KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ