c:\users\user\documents\visual studio 2012\Projects\WindowsApplication152\WindowsApplication152\obj\Debug\WindowsApplication152.pdb
Static task
static1
Behavioral task
behavioral1
Sample
034daff5b443407c84a4bc639d5e19f2_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
034daff5b443407c84a4bc639d5e19f2_JaffaCakes118
-
Size
150KB
-
MD5
034daff5b443407c84a4bc639d5e19f2
-
SHA1
eea87cc11f2f8ddd422582d84de58171d02153d6
-
SHA256
f780170cbcc07326cda96e3cd8364b2a28251c63888b0e5f1df98d8112994e08
-
SHA512
0d94ad8d4b4e9225efbec70894317ecbc73b65dff13094d9cdbd26140ef888fe7f929562402ccad49ed716c6b6f8ec3123e5dc7046f5b3f62a0ac243014a8da6
-
SSDEEP
384:chVohFaXjzJG3ePklL4Q+LRTS4MFI6/1L6w2DFikpcCRu9L1wwAf4J7FWbuHf5eh:cXOazk3kT8mk1H1hwB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 034daff5b443407c84a4bc639d5e19f2_JaffaCakes118
Files
-
034daff5b443407c84a4bc639d5e19f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ