C:\Users\Administrator\Desktop\Client\Temp\GGTwmndjoT\src\obj\Debug\BL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ffd7c817323ded9ab17c4e020fbc8d98_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffd7c817323ded9ab17c4e020fbc8d98_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ffd7c817323ded9ab17c4e020fbc8d98_JaffaCakes118
-
Size
670KB
-
MD5
ffd7c817323ded9ab17c4e020fbc8d98
-
SHA1
ac21d64b6cb3d0ba316db73b7e521c629f60fdec
-
SHA256
63f1f675dfba6996628ec3e6ed448f753786013fa4e626fbbf75128d0adee6f2
-
SHA512
a9c4bff19660b9605a4934abd1f32656bad9d36e3ddebe962a1f32c844c367b753b0058d841e3a355d7fcea50e0957464b5c33e50029c6f819faf0674a8d5369
-
SSDEEP
6144:4vQ+3HwOiVEJvzBdDALThiEOnHvCVvZE5J7uuUf7/5EA4QZzYKyFxg/qZfvbGiFP:4IoiMiD6KBZE3i75EIgxEobJy9NDN8w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffd7c817323ded9ab17c4e020fbc8d98_JaffaCakes118
Files
-
ffd7c817323ded9ab17c4e020fbc8d98_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 569KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ