C:\Users\Mercenary\Documents\Visual Studio 2008\Projects\Welp\Welp\obj\Release\Welp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5d4b872dd6c54fc6bc8e32da382b806c_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
5d4b872dd6c54fc6bc8e32da382b806c_JaffaCakes118
-
Size
365KB
-
MD5
5d4b872dd6c54fc6bc8e32da382b806c
-
SHA1
a1628a5cc9df301226dc398a3a9c80f765926287
-
SHA256
065a027d9dbbd96cdb740da9a315726c090fbea79d74b5d8266d865fb47168ff
-
SHA512
a608779a765e23c0750e4abd42fc935270b3f4af90e90ea82c95301aa28e49d409a5ea538bf9ef0692d1fe2784f95ac6e2181ebc694b94316e3f6b33907beaf6
-
SSDEEP
6144:mopNI2vQplSZkOiu9PZ/pJQkB3BzRP926aGSI9u2LlYv5TT7+rgWbh/zkCID+gKg:monvvNVRJ5lB7ymnbh/RICUl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5d4b872dd6c54fc6bc8e32da382b806c_JaffaCakes118
Files
-
5d4b872dd6c54fc6bc8e32da382b806c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ