D:\Metin2 Hash Test\Metin2 Hash Test\obj\Debug\Metin2 Client Hash By Sekundo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8289e9a56a5938d88d47be4785559d66_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8289e9a56a5938d88d47be4785559d66_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8289e9a56a5938d88d47be4785559d66_JaffaCakes118
-
Size
46KB
-
MD5
8289e9a56a5938d88d47be4785559d66
-
SHA1
2167a31a75a8c7a0d4410724ead9101f48e76239
-
SHA256
4d9cdb60a321cbe911d882f98bb5dc7d37f6fa8e23dfe3d022c9e43dbbb6e93a
-
SHA512
3ef82c71f2385e54872390f2d04ae6af0f5b10dff37a9a3dc2bc9a629a8a2830b2517bfb4c6f310901479cde9356bcb08ec212fe2dbdca8bcc4146667bd3bdc7
-
SSDEEP
768:Iq7P3EKNJnCoadn281XtU2XP9jYbMhLdh3IvWUYoYYeKpISFgQjIC6RzYcHeIm:Iq7/7l8c2f1Z5KdYBKp5gQjEgI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8289e9a56a5938d88d47be4785559d66_JaffaCakes118
Files
-
8289e9a56a5938d88d47be4785559d66_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 133B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ