LL4UcbE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d597df7930af3a69028820c113e8a452d1e475a7011bec755b6ce929222f1a57.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
d597df7930af3a69028820c113e8a452d1e475a7011bec755b6ce929222f1a57.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_8bdd10f92d44bd990005b1b53a91dc595d7b8c8b1f338da980247bf59ee68876
-
Size
796KB
-
MD5
79eab229a832f781434e8454ae5106a1
-
SHA1
58307b9765df952a48a8be021a7b8339d23daf75
-
SHA256
8bdd10f92d44bd990005b1b53a91dc595d7b8c8b1f338da980247bf59ee68876
-
SHA512
19d7a4ac5059d2694d0c634d9e13bd552daa09e8f5d9dff35b4f4e35a1952181d51e0f6bd425364d55df1f8accb03506bcbda625d299fd1eeea78699f267e714
-
SSDEEP
24576:K8DkhOfr0HyJningP4NCcVsiRqmSFfntC:rDfXQcK/RqmUtC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d597df7930af3a69028820c113e8a452d1e475a7011bec755b6ce929222f1a57.exe
Files
-
JaffaCakes118_8bdd10f92d44bd990005b1b53a91dc595d7b8c8b1f338da980247bf59ee68876.zip
Password: infected
-
d597df7930af3a69028820c113e8a452d1e475a7011bec755b6ce929222f1a57.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 858KB - Virtual size: 857KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 530KB - Virtual size: 530KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ