C:\Users\Administrator\Desktop\Client\Temp\tEzUwrozCO\src\obj\x86\Debug\DecoderReplacementFallbackBuff.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7a4ee3c9e3e9105814a2c02a6e326055_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
7a4ee3c9e3e9105814a2c02a6e326055_JaffaCakes118
-
Size
1.4MB
-
MD5
7a4ee3c9e3e9105814a2c02a6e326055
-
SHA1
dc62122e0ace285034495d9be8185636de5540bf
-
SHA256
4d7e4cedde9a2c613ef907b1fd8c9790e349ae738350d90cfb6c129ef689c159
-
SHA512
a9d206d70586629fa5f07889575caff833858640dae6f0874d30f8280723a8a99138e374bd0d767c91a31492c928613bad17b1be756e2afe4caba87e0ac53399
-
SSDEEP
24576:zT9tUc2l1qQJqxauG32hdZ4W+fJkOV3ksFVT2fXz:dtr01dsxahGhUfJr3ksFVT2/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a4ee3c9e3e9105814a2c02a6e326055_JaffaCakes118
Files
-
7a4ee3c9e3e9105814a2c02a6e326055_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ