C:\Users\Bastien\Desktop\Bureau\Programme\Crypteur\Stub\obj\x86\Release\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
965351ee16765a1547b07a2a5bfbac3c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
965351ee16765a1547b07a2a5bfbac3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
965351ee16765a1547b07a2a5bfbac3c_JaffaCakes118
-
Size
87KB
-
MD5
965351ee16765a1547b07a2a5bfbac3c
-
SHA1
f03c443d589dcba52c0d5402360b0233393c1247
-
SHA256
9ccd0297dafe0083f84b5e69ef9d8ed490c30d85de0e4a3415eb1d7910c4e7e5
-
SHA512
96067f9b2de5262fa7f70dcb70c9261e57629343726344ff989a353963f2382395e5eb3811807f5cf0d702d0eb4d6db9c17d774e7788aacb619802757a3ccf7c
-
SSDEEP
1536:yGL9qDHxufy1FhDLkzHwNfUUhO8PrX6fyHLP4jyU9RF7NRrdSY9Ki:y69qWAFhDLIHwNfLM8TX6fm0937npYi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 965351ee16765a1547b07a2a5bfbac3c_JaffaCakes118
Files
-
965351ee16765a1547b07a2a5bfbac3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 133B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ