C:\Documents and Settings\Administrator\Local Settings\Temp\xxa4buvp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9130dd0587c5be70b699cfbe209e37a6.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_9130dd0587c5be70b699cfbe209e37a6
-
Size
776KB
-
MD5
9130dd0587c5be70b699cfbe209e37a6
-
SHA1
4a5c9cec82a10f0f65d2db1e67d51fe6c3c180d2
-
SHA256
fecacc482aeecf02f74ec6c031edf49f8be5617479e45f1c83a76c994124cb17
-
SHA512
a0935f541e75f3dc6b344e3792a8cf60544aa0eca3545b79cfa7154827f00c141752ff75cc781ac7bef9a9054eceda64fe55b9e0f013b1dc07300eee381db681
-
SSDEEP
12288:kt8zTwMhjTJwk3VwlA5K3MMfU4lh0rt3zefBYsN7jLQU+wjG7SOm:kqwqjTJwk3WlAF4ErtjeZ9N7iwjGGOm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9130dd0587c5be70b699cfbe209e37a6
Files
-
JaffaCakes118_9130dd0587c5be70b699cfbe209e37a6.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 760KB - Virtual size: 757KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 125B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ