D:\HelloWorld\obj\Debug\Steam.pdb
Static task
static1
Behavioral task
behavioral1
Sample
28b90b32fc834b7804ba459da3298762_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28b90b32fc834b7804ba459da3298762_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28b90b32fc834b7804ba459da3298762_JaffaCakes118
-
Size
380KB
-
MD5
28b90b32fc834b7804ba459da3298762
-
SHA1
fc083222b65dd18b91514b5b29bcc0be6719e624
-
SHA256
7f3aa6f16a0e9e72a0bb41668dfd350924302a1f00680836bf8e13f2864d8dcc
-
SHA512
581f486220c17b50245b6652f10141b9d2bd5b71df7242dd9083d6ecc8702b7715bf99c4719dd35e8f34ebe9b2c275891c399afc29d69cee55f52ebba38e34d9
-
SSDEEP
6144:xNHoGGGGGGGGGiGNGMlGbIxxr/3WD+h1ebYfjiuZaba2LvE+SN23S99oPn9zU+GN:Ts+XD2uZafV42CToPn9zHGL9nPmHup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b90b32fc834b7804ba459da3298762_JaffaCakes118
Files
-
28b90b32fc834b7804ba459da3298762_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ