C:\Users\Andrea\AppData\Roaming\Microsoft\Windows\Templates\X????e3????5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e4fb78d1e6885b5ea2cc06ba9ae1779d_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
e4fb78d1e6885b5ea2cc06ba9ae1779d_JaffaCakes118
-
Size
695KB
-
MD5
e4fb78d1e6885b5ea2cc06ba9ae1779d
-
SHA1
f9d1aafbf67f91bc90ee39603762843f1b95048a
-
SHA256
e18b61b508bc8bacfc43106544d440b0c19b9c6694d15556560c16e3c13c9994
-
SHA512
5fc90dec3c14033997ea9257f60fc10065698a44171acecb980f7f58b11c8094cb31b70ab1c69f5e888b98b8939774d220038dfcfe18159fd04f88fddff1a067
-
SSDEEP
12288:BgULK8K1euqZfKU2o8pet+O1HX1wUNlyNwyfANhD0Xs1n+J7wCHceW:GcK8K1nu1WpeMOdFiYNhDB5e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4fb78d1e6885b5ea2cc06ba9ae1779d_JaffaCakes118
Files
-
e4fb78d1e6885b5ea2cc06ba9ae1779d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 693KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ