C:\Documents and Settings\dj\Desktop\MyCrypter\winini\obj\Release\winini.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4b72425b7c84a805194e565fc8e0a105_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b72425b7c84a805194e565fc8e0a105_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b72425b7c84a805194e565fc8e0a105_JaffaCakes118
-
Size
910KB
-
MD5
4b72425b7c84a805194e565fc8e0a105
-
SHA1
698fe07b59b64dbf371e67dd395417fe5030da28
-
SHA256
f1d90b834b43c86d9c42566a56d5b7df3595111d85ff27dbf4fb10d1ca85e756
-
SHA512
9c4495261f1f0eef0e39a7c0c0ce0c81678a6fadba1400f0567c367fba7e0c04f4db597d3b92287a1a39fcb046c8cb604efd27f2c2d9006b0426b25198f51e96
-
SSDEEP
6144:M1b5iFO4yll28SiDX1iSNNiJdmYe8kE9RvM+FyGycm/8CabLmjluGbBYzfOIj4vh:+MFul2aJ9unD/I/e/msW2qH48
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b72425b7c84a805194e565fc8e0a105_JaffaCakes118
Files
-
4b72425b7c84a805194e565fc8e0a105_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 598KB - Virtual size: 597KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ