C:\Users\bartek\source\repos\rdpinj\rdpinj\obj\x64\Release\atomic.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fe03e548bef25def2475a1054ac30dab_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe03e548bef25def2475a1054ac30dab_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe03e548bef25def2475a1054ac30dab_JaffaCakes118
-
Size
5KB
-
MD5
fe03e548bef25def2475a1054ac30dab
-
SHA1
f90bd2994ef242269e90ae4871a0880b92f462de
-
SHA256
fc0fb4fcd13408266c5f50a0e57a186f5a2867b25b6754377a6f353b1065e811
-
SHA512
ebc9010251cfec8f45cef54e80bed9c267db98bda5e3682b0d91a2fceb656320af4fac4f4a850f2294ef8c28863062be8f47557480b983af98e88787d0142a72
-
SSDEEP
96:+USywucWYxREpSRp/t8GgGrIqLtkiaNzNt:+UfpcWYnEpSPXgg1LWian
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe03e548bef25def2475a1054ac30dab_JaffaCakes118
Files
-
fe03e548bef25def2475a1054ac30dab_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ