C:\Users\John\Desktop\Crypter\Crypter\STub\Stub\obj\Release\WinFile.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4220e38babc4e88b97f531cf7b4b45e7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4220e38babc4e88b97f531cf7b4b45e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4220e38babc4e88b97f531cf7b4b45e7_JaffaCakes118
-
Size
98KB
-
MD5
4220e38babc4e88b97f531cf7b4b45e7
-
SHA1
28f7e5a012fa2a1a05f3a1c6b51b975f8a531779
-
SHA256
a6be08014689a82e3007bfeb874782a6c5d94e6bb90956e2982d82833d409d46
-
SHA512
7d0fd5d2c60f101851d9948418fb73268c68a7392978e41161f6ea3e79544959ae70a49cd625422bb8abfd6332fe76091fbf19bffc3dd041132588c405a21bb6
-
SSDEEP
768:SjnF0Gpx5rkHFv95rfovWELBRNNbI+wpIwNQPExYQmvO7uD0XYrKKPdanp5H9X9y:SIl94BRfILWwCP1QOONqXYzppt/wxW8v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4220e38babc4e88b97f531cf7b4b45e7_JaffaCakes118
Files
-
4220e38babc4e88b97f531cf7b4b45e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ