d:\Work\ZIP\ZipArchive-Git\unpacker\unpackerXML\obj\Release\sdhsdkvjskdvkdsvn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118
-
Size
5.7MB
-
MD5
04e0c52e54d2ae12b7e63ff8ce66d13a
-
SHA1
b31fbbb607d8680dbbba60eefc719e3e7a4a58be
-
SHA256
4f08525822513ee23a45842a58060f6f834e42d13037af2758cb742d19a78e97
-
SHA512
fa1fc218fe239f713b30ff79bc300a3ca90b7ba55e41f31b8ed976c534d13c39eeedbddd8b8374478eba4c3dce671ddc09bd78d0fc8b72a6e0e601b33b13d6d3
-
SSDEEP
98304:CC10EC/5Wf9HEbNzOE4TARghrpggvaTnhh7SLl1VoeIxdLfER/MxNtWz/RIr8YiK:rOT/wkbNqE1Ag0aTnhgLl1izqRMntWzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118
Files
-
04e0c52e54d2ae12b7e63ff8ce66d13a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 405KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ