C:\Users\Xzibitsebi\Documents\Visual Studio 2008\Projects\Crypter\Stub\obj\Debug\Hijackthis.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4126417eb51f1daee3a5a930b2c8f229_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4126417eb51f1daee3a5a930b2c8f229_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4126417eb51f1daee3a5a930b2c8f229_JaffaCakes118
-
Size
49KB
-
MD5
4126417eb51f1daee3a5a930b2c8f229
-
SHA1
6d665781c08912e23b45858ad37dedcaecdde97d
-
SHA256
17c8a4933b727af52a00eda075df84e6a163d09b0a3b9dcc2ea26345d4630dd2
-
SHA512
b79a10c6bd403d26e99bc3c922c72d6e46a0a357870dda0b76cf8c7035e7b45ed4072e49cbd57f4078c28b8b9e597bea92440ab9e2db93f24c781f4f16af91cc
-
SSDEEP
768:X6c5QMwmA7p4A9BXYrIZUFoEBcP2uMmiLTmzUZhrH6c5Q:X6mQMwqgBXGlBY27eYbrH6mQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4126417eb51f1daee3a5a930b2c8f229_JaffaCakes118
Files
-
4126417eb51f1daee3a5a930b2c8f229_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ