C:\Documents and Settings\Mad Hatter 2\desktop\binder-example\Binder Example Stub\Binder Example Stub\obj\Debug\stub2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5aab096f804cdd89da86812f8e2961d8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5aab096f804cdd89da86812f8e2961d8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5aab096f804cdd89da86812f8e2961d8_JaffaCakes118
-
Size
2.8MB
-
MD5
5aab096f804cdd89da86812f8e2961d8
-
SHA1
9188b8bd6079522eaef5877cea140fb3fe95b386
-
SHA256
755d88d45e457b95a5c1be99ed40d04bfb2232a0034e1390576bd8bad06f6632
-
SHA512
91dda5ba7b67cffb83c351b8422a984df1d0adaa7c8a1b63487c840d4fb60659dd822ff167120cf29c4a6b961bee1327699523335430a8eda63a4bad0ebb63b7
-
SSDEEP
24576:SFEXJUnItyWXwaRaw+OTEixqDkUhl45YoOQYSS7V9ophr/XW+V7Ee:SFE5UayWXCf7kUljLJNV9opp/Xz7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5aab096f804cdd89da86812f8e2961d8_JaffaCakes118
Files
-
5aab096f804cdd89da86812f8e2961d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ