C:\Users\gabri\Desktop\AG3-master\AnarchyGrabber3\obj\Debug\generador new.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b7a6877f2dc02c4bb9f547a5ffcfcb8c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7a6877f2dc02c4bb9f547a5ffcfcb8c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b7a6877f2dc02c4bb9f547a5ffcfcb8c_JaffaCakes118
-
Size
50KB
-
MD5
b7a6877f2dc02c4bb9f547a5ffcfcb8c
-
SHA1
9c7cde98e4d1e8c23e599695368138532d91a065
-
SHA256
2199c4e64443ba6c31a1063954ef7dc5782e751a3bd5f3db82b15167f97d803d
-
SHA512
a96315d3d169d3a53794cb13bba9de4786e2e66c235d3c6ebfbf5a0a6469c6487295f75d90efa42b7cf5d07ba5e59fac82c32e1e1cbb3885bd060d3c0730da67
-
SSDEEP
768:EKia23j9UdaVcVwRuRnjtsjFAW7sVCDqLlqZv+lJJYYYm7BNBZJmL+DueSODeBis:ELa7j11YMHsJVSVZ1+Y+VYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7a6877f2dc02c4bb9f547a5ffcfcb8c_JaffaCakes118
Files
-
b7a6877f2dc02c4bb9f547a5ffcfcb8c_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ