d:\111111111111\ZipArchive-Git\unpacker\unpackerXML\obj\Release\uiksnd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
386709485069242ee572247cdefc897c_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
386709485069242ee572247cdefc897c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
386709485069242ee572247cdefc897c_JaffaCakes118
-
Size
2.0MB
-
MD5
386709485069242ee572247cdefc897c
-
SHA1
fef6201478e5348855bf7d6e3b0bd783bcb43920
-
SHA256
6e66cadf1febf4422fba1ef905ef813468cd02f288e3bbf40f48f39b3da4e3ee
-
SHA512
05042ccdf8500fccda2ef301a89cde7de973452ff238acbf8c57a969a0dc33f5ca7acac638e422357cb376564bbb683b9e4cc1cc5e97a877301132dba6934e62
-
SSDEEP
49152:SROC1xkTWnH/hgn+aFFuJBbNhWasY6DwOBfrnvV7UeWt65E:SUC1xlhQlEbNhqYiwOBpIeWQ5E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386709485069242ee572247cdefc897c_JaffaCakes118
Files
-
386709485069242ee572247cdefc897c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ