C:\Users\Calvin\Desktop\A-S\Wormy\Wormy\obj\Release\svchost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0aaec3baeba8956fc9ad9362dc560083_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0aaec3baeba8956fc9ad9362dc560083_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0aaec3baeba8956fc9ad9362dc560083_JaffaCakes118
-
Size
101KB
-
MD5
0aaec3baeba8956fc9ad9362dc560083
-
SHA1
382343cd4ae1f29e64d370c208ef8cc8a1dc68a4
-
SHA256
c1120b0b32a0276505fd2c2b60d8a91755c6d592ab951bcf7bdfead3d7a938c0
-
SHA512
49349b261f98932b5a766e90e1c893ca3f5343214eddebea902aab56a7586222db43ddd2210b7ffe08d408f81aa5ae0865381f3deb9b010e373f049f030c98ef
-
SSDEEP
1536:YYfPo4gNDuo5ES+2zwy78ROAYx/5SoqWyy0y:Bo/YUESgy7BAu/5SoqWyW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aaec3baeba8956fc9ad9362dc560083_JaffaCakes118
Files
-
0aaec3baeba8956fc9ad9362dc560083_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ