C:\Users\Administrator\Desktop\Client\Temp\pwFlUEIjPO\src\obj\x86\Debug\GCLatencyMo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
BE-IZ-Q-1278-21 - TECHNICAL.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
BE-IZ-Q-1278-21 - TECHNICAL.exe
Resource
win10v2004-20241007-en
General
-
Target
f5ca8f415aea09611a9aa9d3c6bd1a2c_JaffaCakes118
-
Size
1.9MB
-
MD5
f5ca8f415aea09611a9aa9d3c6bd1a2c
-
SHA1
438276787f950bf79393b0903883fff232684e76
-
SHA256
93e4528267157334ef0d55c3f378ce7f862c00d7c49a9215d8a7426188dda454
-
SHA512
311884f53e7b21e0d9ddb1ed44b7e3977662502b0549bc000cb17548c5ae3e480baf4d6d827a2f9a2133ef457575c2561830f7dc8a7183e836f81e9dc9a71750
-
SSDEEP
12288:WC3hpINYoA3P1/GyjcOgHf4uvP9H539XKfalV7T2fXOk/HmUVppUuEVCHo:WCTIN7EZVjcZHf4YbN6UV7T2fXOvOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/BE-IZ-Q-1278-21 - TECHNICAL.exe
Files
-
f5ca8f415aea09611a9aa9d3c6bd1a2c_JaffaCakes118.iso
-
out.iso.iso
-
BE-IZ-Q-1278-21 - TECHNICAL.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ