E:\NET\ByeBye\ByeBye\obj\x86\Release\ByeBye.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_82eb93f4f3e8250cd307f55418f8a9b6.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_82eb93f4f3e8250cd307f55418f8a9b6.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_82eb93f4f3e8250cd307f55418f8a9b6
-
Size
91KB
-
MD5
82eb93f4f3e8250cd307f55418f8a9b6
-
SHA1
eb8b11f863eaa2a40b14ece6f88a2644b7490291
-
SHA256
2f1519d567095f6995dbfb26a69e1dfffae2d9b17ef8ad1f96a22ce1d90764ff
-
SHA512
1e41c41265f12e599496eed5215cb2424cb11b8c34bf32a6bba637ea8d37f4b3fb90e0edc0a01a081010393b093736d9eb3a6abaa3c090e6b1c43a496d0b5248
-
SSDEEP
1536:gP43Ktdr6DpSAbcDL7HU4bFXQb2T2J9999939999ZRYeX5rG7M1999999999999s:gP43Ktdr0SAbcDLDU4bFXTiJ9999939m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_82eb93f4f3e8250cd307f55418f8a9b6
Files
-
JaffaCakes118_82eb93f4f3e8250cd307f55418f8a9b6.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vcl Size: 47KB - Virtual size: 47KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE