C:\Users\Administrator\Desktop\Client\Temp\bxrldiIFjT\src\obj\x86\Debug\AsyncReplySi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9ac604ab0f70a0d75f107b8f52d97000_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
9ac604ab0f70a0d75f107b8f52d97000_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
9ac604ab0f70a0d75f107b8f52d97000_JaffaCakes118
-
Size
1.4MB
-
MD5
9ac604ab0f70a0d75f107b8f52d97000
-
SHA1
48bfbec3b38f5070419e63efce548e7a234a3f0c
-
SHA256
46dff1fda981f377a8ae116f14a7a4352e373787186606d2c5a91ae0c6c25609
-
SHA512
5abea1a5274fd72fc64a44f3aea3545e4b5ab3e2d261c399ff40495f42fc59089756f832f1f0fa408e8714f76a710d2d616017193b53ba074172498e722bcd73
-
SSDEEP
24576:V/CqsL1yQdGc9O42AT2fXB52MMMMMMMMMMMuMMMMMMMMMMMMMMMMMMMMMMMMMMMX:icAGc9O42AT2/KMMMMMMMMMMMuMMMMML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ac604ab0f70a0d75f107b8f52d97000_JaffaCakes118
Files
-
9ac604ab0f70a0d75f107b8f52d97000_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ