C:\Users\QAZ\Desktop\GND\Client\obj\Release\GnDRAC.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3a3322e49ef5103d019f029fce294eef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a3322e49ef5103d019f029fce294eef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a3322e49ef5103d019f029fce294eef_JaffaCakes118
-
Size
728KB
-
MD5
3a3322e49ef5103d019f029fce294eef
-
SHA1
d4c1e0d374c68a165fab8ac555700ee11644b96e
-
SHA256
5614d982f4027ab0c7882597b0807a3aec3554963ff728bbaf9af54adbaf62e2
-
SHA512
7356899b081fbb8ebe6485a06eeccad9d8010d5b1115fda1c1e33aef17f0be9850e6b97a1368b9567f80f5f8a652b5974a2a8251d7b43235a75a0ec363e2ecd0
-
SSDEEP
12288:mHi3RtHpbAQXvmaQUimp+LD+xLuLvy8EcsO0mb5Z34qzV+PC5:zL2C5Rimp+OxLkvJN7rbH4qB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a3322e49ef5103d019f029fce294eef_JaffaCakes118
Files
-
3a3322e49ef5103d019f029fce294eef_JaffaCakes118.exe .pdf windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 107B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ