XmlSyntaxExcepti.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e6fc8bbf9d585429d28269af4f4626388f2451f57f714797dcdaee31f0b089f9.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_1456b8338fa5a0d243dc211aa6969eb72cc24c90d74968d7296b93028df6a23b
-
Size
625KB
-
MD5
d91336c9ffd0916264f8bf6b3e2a17b5
-
SHA1
88439afa8b09f9d62d710f8095f936b6105ba7f6
-
SHA256
1456b8338fa5a0d243dc211aa6969eb72cc24c90d74968d7296b93028df6a23b
-
SHA512
8ee7939828d9013c26ec18323f30b86282992fd693917a03e0676bcc75a26b37b8a6fd4c0258542ed8a16343f61e3a89547669c2b157524b4d54add8d43574b2
-
SSDEEP
12288:rgsdmTzBtSDLq+2/ReCM8NSBOR7gOkrmBnjHyx4bZgJfwEXoJRPrA55j:j8jSfkJeCJOigVx49Qfv4jW5j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e6fc8bbf9d585429d28269af4f4626388f2451f57f714797dcdaee31f0b089f9
Files
-
JaffaCakes118_1456b8338fa5a0d243dc211aa6969eb72cc24c90d74968d7296b93028df6a23b.zip
Password: infected
-
e6fc8bbf9d585429d28269af4f4626388f2451f57f714797dcdaee31f0b089f9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 709KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ