C:\Users\James\Desktop\decay project\Backup\decay sub project\obj\Release\decay sub project.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0d81bf3e4ee4052a99d74a8070a8acd9_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d81bf3e4ee4052a99d74a8070a8acd9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d81bf3e4ee4052a99d74a8070a8acd9_JaffaCakes118
-
Size
38KB
-
MD5
0d81bf3e4ee4052a99d74a8070a8acd9
-
SHA1
8050819181785340d032be9e3948dd8c1cf352ff
-
SHA256
252446b96b57ad7edce08a4e236719271d1bd861885501c80528d65eec66718f
-
SHA512
3415ed8c1cce083133bfd48259cb58edcbc9624026a1d7b6359e64329418ec2ee38ede45a77e6473d1071159279ca7ae0faa4d8f702e8096a8cb1d5e16c52f0d
-
SSDEEP
384:Ohu//BkfGN15yrdjI+cRy2APBsLf45kSyf8K7MPZv9TwhMJqILDU0jMK2X3lyq4U:bBkeNeXdt5ADCwSqab2Xd4Y/i4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d81bf3e4ee4052a99d74a8070a8acd9_JaffaCakes118
Files
-
0d81bf3e4ee4052a99d74a8070a8acd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ