C:\Users\Administrator\AppData\Local\Temp\2\sRGDW.pdb
Static task
static1
Behavioral task
behavioral1
Sample
58215107f6e87ad9b3ebe4ce23aaa91b562c99f307a19ce719179b2d27aaef56.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_12f995b0ef1cf5bced4ab5c1361e5f9b1b1f95510fb82033bec4ec43044c6266
-
Size
449KB
-
MD5
65e14b3d18b72879723ff9debca92f00
-
SHA1
f1719addd7f80d454eee81a8f0bf0f3855451a16
-
SHA256
12f995b0ef1cf5bced4ab5c1361e5f9b1b1f95510fb82033bec4ec43044c6266
-
SHA512
336844d6baa6725dc97f871ca606f10e7c38cca2cf839d3301256a21294c87ce432405311f2e8bb603e54cd65f2657c85984e0400e5587e0f4ea4b2af3c8c863
-
SSDEEP
12288:dTKB0S+zaHXExNnPIbi3OsC63tvAdA61568KfHv/JEw5ihS45mfspe:JKB0OXExNPIPrdA4S95S/mfspe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/58215107f6e87ad9b3ebe4ce23aaa91b562c99f307a19ce719179b2d27aaef56.exe
Files
-
JaffaCakes118_12f995b0ef1cf5bced4ab5c1361e5f9b1b1f95510fb82033bec4ec43044c6266.zip
Password: infected
-
58215107f6e87ad9b3ebe4ce23aaa91b562c99f307a19ce719179b2d27aaef56.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ