C:\Documents and Settings\Owner\Desktop\Zezanje\unique stub source\crypt sub\obj\Debug\WinRAR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
30f840283943d4a8cbc92bdf3ec9d570_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30f840283943d4a8cbc92bdf3ec9d570_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30f840283943d4a8cbc92bdf3ec9d570_JaffaCakes118
-
Size
110KB
-
MD5
30f840283943d4a8cbc92bdf3ec9d570
-
SHA1
2f4c5a134ea48dfe828b22bcdb67147446274557
-
SHA256
8f949646b4f80b93ed6eca6eb0973b2396178b49fcb73a6b1c5ded992d7bf2a2
-
SHA512
1a2b3773f9ca3705062491358724ea1fd165fda55451207a3f33462818591cc32ee4a3a044e3ddf0847703e594f810475b635fc98f68533fdcab46ce97a4b121
-
SSDEEP
1536:trqS7XV10GB+u07wYbbbbbbM9bbbbbbbbbbbbbbbbbbbbbbbbbnlBKnD/PbLbbbt:t2S7FALkhZkJrii63FnsxlJHlviZw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30f840283943d4a8cbc92bdf3ec9d570_JaffaCakes118
Files
-
30f840283943d4a8cbc92bdf3ec9d570_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ