C:\Users\محمد\Desktop\د برنامج دمج apk\د برنامج دمج apk\obj\Debug\د برنامج دمج apk.pdb
Behavioral task
behavioral1
Sample
09df32cc5ae94bf09a9783a0a43d227a_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
09df32cc5ae94bf09a9783a0a43d227a_JaffaCakes118
-
Size
579KB
-
MD5
09df32cc5ae94bf09a9783a0a43d227a
-
SHA1
2e44d82290dffdf5e2dea21e438a74edbd5eaa83
-
SHA256
f27d25a137e533efb6deed5249e84de2992a76240d4f173dace5f1717ba25e42
-
SHA512
9d44718e991d5eecf657058889faf3d837b2842e0269b7ec7d48b4c8ab86ed773cab714c6c7df441cc2abd596c49bac95ef8108692ff1e8b42fae80446e52471
-
SSDEEP
12288:rPpdxGqPiHPiWXAfYFR76oKihQ9x+pdxGqPiHPiEXAfYFR76oKihQ9:rPnxeHqWQAFR73KihQ9x+nxeHqEQAFRk
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09df32cc5ae94bf09a9783a0a43d227a_JaffaCakes118
Files
-
09df32cc5ae94bf09a9783a0a43d227a_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ