c:\Users\runneradmin\AppData\Local\Temp\1\bin_copy\obj\Debug\Obfuscated Name.pdb
Static task
static1
Behavioral task
behavioral1
Sample
28487f6400f7d5a53a9c11c6aac7579a_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
28487f6400f7d5a53a9c11c6aac7579a_JaffaCakes118
-
Size
2.9MB
-
MD5
28487f6400f7d5a53a9c11c6aac7579a
-
SHA1
1a498bc2ec998ef5ea5e25cdb9428bf15679e158
-
SHA256
93fb6e2fc7d54f744796b10f48fa18e88e2973b1b2502833de8ee6dd4a40a56d
-
SHA512
efe0614bcd3aca324cf86fcd4e50af675450e48b9a6eb327d10ca5b0bc56792a1fae9f18664e7d145b1adc277e404161dd0ee976a499e79143bf5ae43e7d4564
-
SSDEEP
49152:VsmhnqAs9pJc0dnKh+Q0N1rs+vIUSg+6+8ohnRh1Na1OKM6nYAKhFQpSH3Oh5gxZ:DqXpy05Q0N1rsYSZ6BoXh1kkypSH3Ohs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28487f6400f7d5a53a9c11c6aac7579a_JaffaCakes118
Files
-
28487f6400f7d5a53a9c11c6aac7579a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ