c:\Users\vampire_n0S\Documents\Visual Studio 2012\Projects\roje\roje\obj\Release\eshi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a828e47d1bda403ab9a7d26381f1de30_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
a828e47d1bda403ab9a7d26381f1de30_JaffaCakes118
-
Size
151KB
-
MD5
a828e47d1bda403ab9a7d26381f1de30
-
SHA1
3c1267eb0e5e2b539a50c0f8b69f47bbd59d2063
-
SHA256
d87e3f57e558912eb63cedc9246030a9c5f968ceff5d9ae73912e84b83308780
-
SHA512
950384bd08d349aa5186ca3713b38ad5eef0697623d150e0f64f3b3c70691f62711ad9793df414909d08f8e40b5a4325061b39e1007e365d71f987469240b71f
-
SSDEEP
3072:QdXFWBmsMv2tqVZLdrz7MUCiXizOHielQwX3FuoWtjk:QfrsRtU7JwzRe1lu1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a828e47d1bda403ab9a7d26381f1de30_JaffaCakes118
Files
-
a828e47d1bda403ab9a7d26381f1de30_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ