C:\Users\Dyego\Documents\Visual Studio 2005\KanK (c#)\KanK\obj\Release\Desktop.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16f73ef38c8fc6f1637d7ab1ca538d85_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16f73ef38c8fc6f1637d7ab1ca538d85_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16f73ef38c8fc6f1637d7ab1ca538d85_JaffaCakes118
-
Size
3.5MB
-
MD5
16f73ef38c8fc6f1637d7ab1ca538d85
-
SHA1
6bf5a4a17c62da248cfa2cc283c5cda70a42ba49
-
SHA256
11735d62494b46eaf7d29b4fedaeab8102d61d8fe8cedfd10426f2c94b3232fd
-
SHA512
39ec1a93156dceb7065c31c76cf038e1aeaf354d265c97f9d8556201f77b1a79039c763d6016f9691e00500a2ff396671c962247aa57cb1644405b10df50b701
-
SSDEEP
49152:SUa2A5VfF0Qy25m+ibsI6gdyFW6x01WF+95MlHNH:SdM25m+tlgsFW+E5mHNH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16f73ef38c8fc6f1637d7ab1ca538d85_JaffaCakes118
Files
-
16f73ef38c8fc6f1637d7ab1ca538d85_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ