C:\Users\wyatt\source\repos\CStub\CStub\obj\Debug\CStub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5c2e0f6fe9ae677d204515257c1ccb83_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5c2e0f6fe9ae677d204515257c1ccb83_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
5c2e0f6fe9ae677d204515257c1ccb83_JaffaCakes118
-
Size
973KB
-
MD5
5c2e0f6fe9ae677d204515257c1ccb83
-
SHA1
78f361024ae382cd1845814782446d4d44048190
-
SHA256
5164bcba58d62b772865db0850647c2f9288a17290b7f9bf0d5742767dd2b6ae
-
SHA512
6e12f7b8c99f1c7752e9c0b763c1ca2e9c433a445a11224a43512d704ae5e19aa07b33a25a48b4e45233192050db9cd8108f642e3564fe387e309c9dfdb9be7d
-
SSDEEP
24576:WP8Fc6z+WDpvI7hOvA+3RRcMUqlZQTYs6U:WPaztBVLRPUi6pb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c2e0f6fe9ae677d204515257c1ccb83_JaffaCakes118
Files
-
5c2e0f6fe9ae677d204515257c1ccb83_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ