D:\TERMINAL_TFS\Self-Service Betting Terminal\BetConstruct.BettingTerminal.Installer\obj\Debug\BTI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
865e43e66a1bd2fb7187c09d834ec7cc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
865e43e66a1bd2fb7187c09d834ec7cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
865e43e66a1bd2fb7187c09d834ec7cc_JaffaCakes118
-
Size
24KB
-
MD5
865e43e66a1bd2fb7187c09d834ec7cc
-
SHA1
81ed323c314ea2152e58e60850ebab263a64e5a5
-
SHA256
89b00ffcd0fea704c488cf949ec47b9286057dfb7e763be44d185218918dd682
-
SHA512
376f5a2561837beff49733b73c89aa5e95461caddc16320d4d81ea435fd71be027e521bef8e5feff8a7b9143035793ef30797ba3139ac047d92bd7bde1725cfe
-
SSDEEP
384:oPt32udhJEoDFLgAAq50Tait/glR+GmX2H4rPuuv4r/yTyw+7ol0eyHXZ6hMEHBk:ofEoDFLgDq50TaitOR+Gm346ywqeOZ6u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 865e43e66a1bd2fb7187c09d834ec7cc_JaffaCakes118
Files
-
865e43e66a1bd2fb7187c09d834ec7cc_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ