C:\Documents and Settings\tof\Mes documents\tof\dev\OnlineCrypter\OC\realtek\obj\Debug\realtek.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2345423b5cf9ffe4084a2024ef15df91_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2345423b5cf9ffe4084a2024ef15df91_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2345423b5cf9ffe4084a2024ef15df91_JaffaCakes118
-
Size
72KB
-
MD5
2345423b5cf9ffe4084a2024ef15df91
-
SHA1
d35681d378337e67752aeb97854f3789a63c6e3f
-
SHA256
d37310e43670741285aaf90872740d8c404836ae7a27295ae7d674002f61a528
-
SHA512
5164331fa3b9af02704490b4295bca485d634ba927c37db2c49dd1b5b0717869cc828236a924acc824e62378b93d0e3289cce36ecffc83f7292021aff3ced35b
-
SSDEEP
1536:qpec/57ZGX1EJJeCpxtoBXQVpG5GWmtj/h:IR1W9C5oBgV45GjtDh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2345423b5cf9ffe4084a2024ef15df91_JaffaCakes118
Files
-
2345423b5cf9ffe4084a2024ef15df91_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ