C:\Users\Administrator\Desktop\Client\Temp\RwyQUfhHCc\src\obj\x86\Debug\AccessControlActio.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bb907cff6ef7b1193fd4db7204a0014e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bb907cff6ef7b1193fd4db7204a0014e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bb907cff6ef7b1193fd4db7204a0014e_JaffaCakes118
-
Size
839KB
-
MD5
bb907cff6ef7b1193fd4db7204a0014e
-
SHA1
2b04f9409d6bfb8b5eb1b55f024d72b81cc46008
-
SHA256
40279a0eec5f0080c04b299b86bc5aab31d1900b5d63787d713e48fa96d3b8e9
-
SHA512
a62c3ca0198d75be8c85d8b1ffc5a6e9e74a9b1dafb623891a7e42da4aa22ae47034a126966cd244bfd3ccc172312cc25cf97961c75bcd532d2edcb3afd1cf24
-
SSDEEP
12288:Yih79fOurYm+ijO8kLhlLFezZQrSfvgImxtHuhHK7zszKbolL7F:Ym7922mR59lLFezqelmxVeKboH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb907cff6ef7b1193fd4db7204a0014e_JaffaCakes118
Files
-
bb907cff6ef7b1193fd4db7204a0014e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ