G:\###자료###\######샵판매자료\[#] 인젝그래버\ITB\obj\Release\AntiScript.pdb
Static task
static1
Behavioral task
behavioral1
Sample
601b160dc5a8ea38ce3c6ded0b6bc72c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
601b160dc5a8ea38ce3c6ded0b6bc72c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
601b160dc5a8ea38ce3c6ded0b6bc72c_JaffaCakes118
-
Size
328KB
-
MD5
601b160dc5a8ea38ce3c6ded0b6bc72c
-
SHA1
388f15352d666b6360624d8de094fafc445fd4cb
-
SHA256
2c9e39cb043150221e5d4a6760888235a9e0e5b90a8805ac555d5794d88262ca
-
SHA512
446d08914fb0c01acbb285803c125934b3e8c414c05339ba7c890995130c2a1b4cac4b9b0915b47887402732649893cf50cd9e968152395b5d1f6d42f86b6ebd
-
SSDEEP
6144:sgoJgUpL8SNFDu/O63hGSb/DB5pr0+UTsWkef1XwxQ1RaxHU9jxA:sgKp5bu9TlLfUTdwq179
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 601b160dc5a8ea38ce3c6ded0b6bc72c_JaffaCakes118
Files
-
601b160dc5a8ea38ce3c6ded0b6bc72c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ