C:\Users\mrsna\source\repos\MONEYAPP\MONEYAPP\obj\Debug\MONEYAPP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ecf5d4dca07933a8031fb2f2b8bd4d02_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecf5d4dca07933a8031fb2f2b8bd4d02_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecf5d4dca07933a8031fb2f2b8bd4d02_JaffaCakes118
-
Size
8KB
-
MD5
ecf5d4dca07933a8031fb2f2b8bd4d02
-
SHA1
98f8eb4266cd16ae9d76bf94bc776e5a9eed1b55
-
SHA256
3f489a3c3276986ecea1615fbde97a171af7f6a475eb674ed2a2c36572c4894d
-
SHA512
7bff3f9dbe9253a07f846fc5dbad646203c7d8947d82a6d234add16d02546556a5472d51dec0bffbae04508b525ae6a7f801f7c81153257ca803ad930fbdea63
-
SSDEEP
192:xpGHywtlDHD1fD21CrS/GARbvTZi3vYSZ+/CIMpUCTiI:xQPRXm/GARbvTYPZcCzpUoiI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecf5d4dca07933a8031fb2f2b8bd4d02_JaffaCakes118
Files
-
ecf5d4dca07933a8031fb2f2b8bd4d02_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ