C:\Users\Administrator\source\repos\payload\obj\Release\payload.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f986c78d587459076dae9f1587984124_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f986c78d587459076dae9f1587984124_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f986c78d587459076dae9f1587984124_JaffaCakes118
-
Size
142KB
-
MD5
f986c78d587459076dae9f1587984124
-
SHA1
573d6f4b0721296fefc843a9ab2b6b0b13979de1
-
SHA256
2ed68749bb83a48a25afb70e802f60fb935e1516b67010daec3ea2baf61f53f9
-
SHA512
56d16c0936547ec9c1145be5d607f2f6cd3f95a27de4409d68415555501cd4661f6c61cc2ad7b48e49c062cfd368e25336d413a91517741ea73dae435134d6ef
-
SSDEEP
3072:+gpyr4mNoBAUK8GtGGRd+u0sCrv04tnv22gaxH2zJeTzQP8sAys2:+gQr4mNoBTBsdLI8zaxHUJeTUUT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f986c78d587459076dae9f1587984124_JaffaCakes118
Files
-
f986c78d587459076dae9f1587984124_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ