C:\Users\Administrator\Desktop\Client\Temp\GasmuGKerI\src\obj\Debug\STORECATEGORYINSTA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0cbaefa900f08c2844a65456c26385770ba32ecfdfe4ad1e774aa63538b5d2b1.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_ba6b9518c8c5520a830578a1b2d66535b879933ceec43e88d786ef6822aaf85a
-
Size
620KB
-
MD5
dd81cb6acc58a1f9ffa8bbeb084319a2
-
SHA1
59191ac333c0ab1a7d3f1cc8340b9951d751b07d
-
SHA256
ba6b9518c8c5520a830578a1b2d66535b879933ceec43e88d786ef6822aaf85a
-
SHA512
ce2feef18799d00971349d0a0cb1d4595e32df8ee95952b92e0b3380ed2199483e92dd7ef6e549f93845e77e892a7eb2a6d43d9122d16cfcd4027a1a1b900d02
-
SSDEEP
12288:BoMP8UvE8AwvVCZ7T476hZ36g5nEarS4ac2ap69Gk1otKzNI1fBr:BoLwCm7mZ3Z/acr69v1ouNIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0cbaefa900f08c2844a65456c26385770ba32ecfdfe4ad1e774aa63538b5d2b1
Files
-
JaffaCakes118_ba6b9518c8c5520a830578a1b2d66535b879933ceec43e88d786ef6822aaf85a.zip
Password: infected
-
0cbaefa900f08c2844a65456c26385770ba32ecfdfe4ad1e774aa63538b5d2b1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 835KB - Virtual size: 834KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ