E:\tools\Black Hat Rat V 2.0\black hat update host + port\black hat update host + port\WindowsApplication5\obj\Debug\WindowsApplication5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3b62c0705b9e1d43257b9bef18b580df_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b62c0705b9e1d43257b9bef18b580df_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3b62c0705b9e1d43257b9bef18b580df_JaffaCakes118
-
Size
29KB
-
MD5
3b62c0705b9e1d43257b9bef18b580df
-
SHA1
acebb0a8d631c17fa1a83a5893eb2c1a98d0dd9a
-
SHA256
dce8faec7b735cf716f7b053bc2f0fa19766dade3efd76a31395e057fefbb568
-
SHA512
c312984602bb59830584c6e51f139271826b35eb857e008e26eb7d7732a8de788d59c10be64a6f394ec3677629fe9248d92f0521e1dbdaf9bbf9fb005c782174
-
SSDEEP
384:lyNYHlJDNpXGwFd8cSTaA7QFoXIrt2BHQhSOZr3b0SXGE4aFc/qYqUPLpdOZ8Gkv:qODNxUQhSCLHc/6Z2z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b62c0705b9e1d43257b9bef18b580df_JaffaCakes118
Files
-
3b62c0705b9e1d43257b9bef18b580df_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ