C:\Users\czyzmari\Dropbox\WoT\Active Dossier Uploader\Active Dossier Uploader\obj\x86\Release\ActiveDossierUploader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
286defffdcb0c4d6242b584a3a43a521_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
286defffdcb0c4d6242b584a3a43a521_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
286defffdcb0c4d6242b584a3a43a521_JaffaCakes118
-
Size
1.2MB
-
MD5
286defffdcb0c4d6242b584a3a43a521
-
SHA1
b4c36fefef13d9eea87804d1fd7548a750ced9dd
-
SHA256
8cdd114fe4e507098fbc5f0f190b70e6a20ffd246b0d8e452a7b19d78b48e4b1
-
SHA512
f55dc3598604dcedde74b0efa175048eb1008a5b63123bf28c8e5ddacd08df8457ea021626b48188b89a8cd605d9e97fef741c09386953e0139d02da2540906e
-
SSDEEP
24576:TFGcHCxpyb6NjXZ6MB6Q6mmFGcHCaxqcHCO:TFJixpyb6NU26PFJiaxli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 286defffdcb0c4d6242b584a3a43a521_JaffaCakes118
Files
-
286defffdcb0c4d6242b584a3a43a521_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ