C:\DATA\Visual Studio 08\RegisTooltip\Test\obj\Release\Test.pdb
Static task
static1
Behavioral task
behavioral1
Sample
76134637bebd1e0bab479b0b8814f087_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
76134637bebd1e0bab479b0b8814f087_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76134637bebd1e0bab479b0b8814f087_JaffaCakes118
-
Size
61KB
-
MD5
76134637bebd1e0bab479b0b8814f087
-
SHA1
7217c26885c22e564f7c78782c59f37392f68c14
-
SHA256
5813ba97ad771843069ed0c0de330d4ec68d45844ad2a9788b0438f61c66b62c
-
SHA512
fa20d5aec1638eb6f69b6d432caf92c27c420d299f6c99cf580ec3c5e81ca89ee5858516618226898aa4213a7b9744a89c7c13f25a77d493a26492100ef6f9bb
-
SSDEEP
1536:fOFOFOY5NjCxiT5TXZNV6Ondx5lLP5V7:fOFOFOY5NjCoT5TXZNV6qx5lFN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76134637bebd1e0bab479b0b8814f087_JaffaCakes118
Files
-
76134637bebd1e0bab479b0b8814f087_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ