C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Visual Studio Projects\AIMFakeServer\obj\Debug\White-Day_Login_Faker_AIM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f7212dcf0960ed0a025f65bb23a266ff_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7212dcf0960ed0a025f65bb23a266ff_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7212dcf0960ed0a025f65bb23a266ff_JaffaCakes118
-
Size
160KB
-
MD5
f7212dcf0960ed0a025f65bb23a266ff
-
SHA1
26e821d80ff1359935938cfec66b068cf588589c
-
SHA256
7379a9820c3c75611b3c01e5ba436203e9b89f3fbfdab16faf0a744a46086f5b
-
SHA512
d621818c165650763142c98f2a50e4721d6d8587267fbcfe6569efbe4acb87d5ee8c9d9fae3528247d014c75d573c96dbe9be63ff73e814cddee7e5c386feeb5
-
SSDEEP
3072:wf/YtgFv2bn9B3VjDDDDDDDDDDDDDDDDDDDDJ0iVLuk0ePmidWfIvDNInz:sY3lDDDDDDDDDDDDDDDDDDDDJ0ipBXei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7212dcf0960ed0a025f65bb23a266ff_JaffaCakes118
Files
-
f7212dcf0960ed0a025f65bb23a266ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ