C:\Users\brendan\AppData\Local\Temp\cmxsb1kb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
114613cc7601f49cd4edc6db3f86d062_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
114613cc7601f49cd4edc6db3f86d062_JaffaCakes118
-
Size
436KB
-
MD5
114613cc7601f49cd4edc6db3f86d062
-
SHA1
ed1075046b045330ca19ad795c99543bcc497693
-
SHA256
a0ae6d87b3d8def0da447020ae71483b189efff8631d2a4793d88af78a2b68f4
-
SHA512
6f657724426c2988bcfbc539a5a6c0667083a1b7779ee4876338abf85ba9787e1cd5bf9121ce45957d9d3af18882698ea47962a05f6f70d75a5dabcb341db551
-
SSDEEP
12288:vu9X4vDVgdvUC7DIKOVS8ZHNfP5rySG2GR:hpgdDIdVSCXFyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 114613cc7601f49cd4edc6db3f86d062_JaffaCakes118
Files
-
114613cc7601f49cd4edc6db3f86d062_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ