C:\Users\Administrator\Desktop\Client\Temp\sicLleRAiw\src\obj\Debug\XVfb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20220926_0001.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_8ce4ad58214062caff58e6bdee836024c7dba4c3c73d47fd66d96930be15de1d
-
Size
634KB
-
MD5
a17d9fa324fd370c8d326b7fed0a0fab
-
SHA1
9f9a0269c57bb8dfce05af2b65539498e7d1b4d7
-
SHA256
8ce4ad58214062caff58e6bdee836024c7dba4c3c73d47fd66d96930be15de1d
-
SHA512
94dd22d19c8a5c6e7fe7f6e8e1f5ad76c8614bbb62a5515e7a14e27ddd1d1cf7b8d2619d6a13128d05005fb42b06ef7f10de82c399ee503d3d7036d36ea84a6f
-
SSDEEP
12288:iFrD3MMm2aS+8mnC7xVBc1NR+7I/H4kXOkSwFVpn9SvAE2JhEZGeFAATrizQO5B:idD3M81+F+juHR8kXbdsAE2J2ZGj4uzv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IMG_20220926_0001.exe
Files
-
JaffaCakes118_8ce4ad58214062caff58e6bdee836024c7dba4c3c73d47fd66d96930be15de1d.zip
Password: infected
-
IMG_20220926_0001.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 952KB - Virtual size: 949KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ