C:\Users\Evil\Desktop\Crypter\crypter stub\crypter stub\obj\Debug\crypter stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2c132cd7ce288d1c8dba4f6cc0f3ebf2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c132cd7ce288d1c8dba4f6cc0f3ebf2_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2c132cd7ce288d1c8dba4f6cc0f3ebf2_JaffaCakes118
-
Size
2.0MB
-
MD5
2c132cd7ce288d1c8dba4f6cc0f3ebf2
-
SHA1
c0f6cc7f1e295ee601236a652ca57b20e42eda12
-
SHA256
c79c2d484ee65cf80d3b7e2a6168e4addc9ad08f67738f350f23ab2264dc3921
-
SHA512
4472a94d0e065c34f079e5174bfa47646e496561cc738f70add72dd821acf97ad9ca0b3e45fbdc1eaef9cb33c5b06b9c2e01a3bbe7cb5bef48d735b687dc401a
-
SSDEEP
24576:ClC7ADOH3GOKmbTiIqQq/p8a/jQuQw+AtUEcvTAQ99dJ1TMEcS5iKFkRCFJWzD:CwAKWOKkm/p8asuQDtbAWzTvcS5t8i0f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c132cd7ce288d1c8dba4f6cc0f3ebf2_JaffaCakes118
Files
-
2c132cd7ce288d1c8dba4f6cc0f3ebf2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 135B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ