C:\Users\Amr\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_35a6a33753c12a8813dc8363658cd560.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_35a6a33753c12a8813dc8363658cd560.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_35a6a33753c12a8813dc8363658cd560
-
Size
95KB
-
MD5
35a6a33753c12a8813dc8363658cd560
-
SHA1
b8c83cd1253db8c2a193914c4f25c81e9ce9de00
-
SHA256
a5d0c41be8101d26ada31b8fbaf3527c726ae65fc65f703d59c15c2426dc3698
-
SHA512
734964d9be9c564b2af16a0f8a26eb72ffdb75fbe8511b6ad7a4be8545f5ae10c58690f09fe661be7f2b42d71cb22265b892f33344703b81293ba6a07c062dfe
-
SSDEEP
1536:8+ZQMGdeUwljEoKayOxdcJx7OXMHwhkVfjobkZKQ5x1AkSpoHHNLHieBb:8+ZQMtU9Jx7OXMHwhkVfjobkZKQ5x1DT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_35a6a33753c12a8813dc8363658cd560
Files
-
JaffaCakes118_35a6a33753c12a8813dc8363658cd560.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ