C:\Users\Cya\Desktop\DarkRAT v11 Full v3\Obsfucated\Client\Client\obj\Release\Client.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2395b3ced5b7b9f479fa0433f4ab2aad_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2395b3ced5b7b9f479fa0433f4ab2aad_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2395b3ced5b7b9f479fa0433f4ab2aad_JaffaCakes118
-
Size
910KB
-
MD5
2395b3ced5b7b9f479fa0433f4ab2aad
-
SHA1
7f1edf408d088068810a9ce65a2dd47465fd5240
-
SHA256
d4f05f6ba158fd714664a91b17231629eae59623e23fe57e4a88397487630c08
-
SHA512
85a58ce9a55e1a3bbb3857c3b9b111e9baeb999906aaa22d12cdf13c5d103401d193bbeba0e789f959ce350c278328d76bff79f9920576759a4d49e2d4624dfd
-
SSDEEP
12288:9jTbE76QINzmknDRzRNXl6vknu5Uki/OZRGoOK+gJf86QCcKNQZ1shOPk:WKloknuy/KM4NTOPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2395b3ced5b7b9f479fa0433f4ab2aad_JaffaCakes118
Files
-
2395b3ced5b7b9f479fa0433f4ab2aad_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 777KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 141B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ