c:\Users\Computer S\Documents\Visual Studio 2012\Projects\MyClean\WindowsFormsApplication3\obj\Debug\WindowsFormsApplication3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a67a38492e71bf6b9e463f58844aa516_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
a67a38492e71bf6b9e463f58844aa516_JaffaCakes118
-
Size
52KB
-
MD5
a67a38492e71bf6b9e463f58844aa516
-
SHA1
70e31f6515bd168255868244999a36436561f593
-
SHA256
03be99f2ae370c21855c4005f1d2ead3608a7de143ab1a04c51453744f7c9ad1
-
SHA512
f9aeb37cbd8d9d19c2c2c805bdd0161d10492a420202ac4f883489ad3fa21614b741d1f49d99d5800e0141e1999c0f93eea300b3636e59debbd9262b75a02b26
-
SSDEEP
1536:ISmSIyaAK76ChPHLFfwOLgFUzET/38x/s2:ISm/Wcr1wO8FUzET/38x/s2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a67a38492e71bf6b9e463f58844aa516_JaffaCakes118
Files
-
a67a38492e71bf6b9e463f58844aa516_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ