C:\Users\Tom\Documents\Visual Studio 2008\Projects\Fixed stub\Advanced Keylogger\obj\Release\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
097804f4e650f19e6d5867aac293c60a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
097804f4e650f19e6d5867aac293c60a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
097804f4e650f19e6d5867aac293c60a_JaffaCakes118
-
Size
1.3MB
-
MD5
097804f4e650f19e6d5867aac293c60a
-
SHA1
f3fc777d3ef6d31608572bad9d16d29181c6847e
-
SHA256
86f24ac3acabbbf8fc2790ed2c564cd28351f4d7eba8bda0d3848dcce3e8cf49
-
SHA512
fa94266ac6422182ecc33fea69b11455469eb2ca973fd70ff87cf04856ab661fe2538d7e9ebc1527a986dc1ac74b89b40d5229ede6d961ea37c2678d2de59cd3
-
SSDEEP
12288:cyhhhnhhhhhhhhhhhhhhhhhhhhhhhhhhS000000000YeRyzJLBGIH:cv000000000YeRySk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 097804f4e650f19e6d5867aac293c60a_JaffaCakes118
Files
-
097804f4e650f19e6d5867aac293c60a_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 154B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ