Z:\tw1n\test\Release\tw1nCrypt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a00a1e0389c24a46f501d23b25f36d12_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a00a1e0389c24a46f501d23b25f36d12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a00a1e0389c24a46f501d23b25f36d12_JaffaCakes118
-
Size
47KB
-
MD5
a00a1e0389c24a46f501d23b25f36d12
-
SHA1
2b35544c7a2d6df05aa358628f74bd3374b229f8
-
SHA256
4dbcef64879e57af3559894a4cbdb40c8c8b9768bea43994fbf6a0a9ac8327d9
-
SHA512
c22aa41c4e55152445e45dc96508b74379b1957dea424717cf479c5bb426f52e1306b2a9e6aa601962fcd39c722ac8a5e2a44f875e365ada88dda2afa66cde18
-
SSDEEP
768:lxnZpp+Ptx/yalAI5lcdJ7bihJ+6SzSpE9u/0EMvSHj6X/RGH6sJ1:lZZj++al/lqih7p9/gvpYH1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a00a1e0389c24a46f501d23b25f36d12_JaffaCakes118
Files
-
a00a1e0389c24a46f501d23b25f36d12_JaffaCakes118.exe windows:5 windows x86 arch:x86
bf1ac19e064ab24b68e7b67cadeeb289
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrcmpiA
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 179B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ