C:\Users\Asus\AppData\Local\Temp\4fqvxskf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4201b630f290369a15d6add1e4350807.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4201b630f290369a15d6add1e4350807.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_4201b630f290369a15d6add1e4350807
-
Size
448KB
-
MD5
4201b630f290369a15d6add1e4350807
-
SHA1
34d572905fa12501dcc3d6c32e2f2eb4652b3484
-
SHA256
539190deacdd63c2edab1e0792c1ab42650718b845bfc841bd43d3ddc564718f
-
SHA512
56dfe7b1ad609c3e1c63ab9195f859416e3c047f8811826755753c8f2350869c91896f6bd9cbc5091848025bd603dce79cbfff4369634c591c2793c81b6704ae
-
SSDEEP
6144:bYabMhRpdkomkk2itd2ghnjPaG/2fRuMdI5iBRJ3yzuAgxjQGJljHk0qJLzsl922:8aMdJgThnLalRub61r1RlDALU9r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4201b630f290369a15d6add1e4350807
Files
-
JaffaCakes118_4201b630f290369a15d6add1e4350807.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 300KB - Virtual size: 297KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 98B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ