D:\Slichice\Hakovanje\[2010] Hakovanje\DeskTop\VB.net\Projects\CR-Crypter\CR.Stub\obj\x86\Release\CR.Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
388b15aa216a6a66fb4986fe5bb7bc80_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
388b15aa216a6a66fb4986fe5bb7bc80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
388b15aa216a6a66fb4986fe5bb7bc80_JaffaCakes118
-
Size
392KB
-
MD5
388b15aa216a6a66fb4986fe5bb7bc80
-
SHA1
291df636a60a8a683d555fce73c51a2b15725491
-
SHA256
f28b2b925aaddeda132ce156fae3c4d4f95f7f5d9caa1a526e6da01f2b658f82
-
SHA512
979d6be21ac8da569be3c53e40837516777f46872d7bcbae44ecc08d91f242c5938277ccf0e2c9d6de44e316af39e8aab0b4aa158be4fe5ccd0305607df1a858
-
SSDEEP
12288:CsUUQLe0UtsbAhDba6Uzh45dC91DaqMXaAQDv7h:MK0UnDba6UausjMl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 388b15aa216a6a66fb4986fe5bb7bc80_JaffaCakes118
Files
-
388b15aa216a6a66fb4986fe5bb7bc80_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 350KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ