C:\Documents and Settings\Terrore43\Bureau\Crypter\AlxStub\AlxStub\obj\Debug\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
88db3d69b01a78e3ea95e6ec4a427afc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88db3d69b01a78e3ea95e6ec4a427afc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88db3d69b01a78e3ea95e6ec4a427afc_JaffaCakes118
-
Size
28KB
-
MD5
88db3d69b01a78e3ea95e6ec4a427afc
-
SHA1
02a10846509968dfdeef8714a6c0778210df1705
-
SHA256
27c71a61e723d612ef49e180f3069db2e720b39ed45f13de87ad9e1058d3f93e
-
SHA512
791a61722f782e9d9a1a56767c9b56b0db1a3e43202c7549b6b0bba8b96b14da0e33b981e4cbd86a6f90060d87914d634ce43599f6f64cac48abaa979a56cdda
-
SSDEEP
384:ZoXaiQ/Jc73KSbO4bW+LRw7y1RpLHafjC8mS5NqmZFN3iHlthq8GGHLJYVES:SXalbS3Hwm+fZjxWlYKS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88db3d69b01a78e3ea95e6ec4a427afc_JaffaCakes118
Files
-
88db3d69b01a78e3ea95e6ec4a427afc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ