C:\repos\Other\AsyncRAT-C#\DotNetUpdaterClient\obj\Release\DotNetUpdaterClient.pdb
Behavioral task
behavioral1
Sample
a035b0a1bc1a17963f71b0b590eed74a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a035b0a1bc1a17963f71b0b590eed74a_JaffaCakes118
-
Size
39KB
-
MD5
a035b0a1bc1a17963f71b0b590eed74a
-
SHA1
ba7d6b6b96db6106f344bd2c8190c80e4703805f
-
SHA256
71989a85abe369103efc748a98c82759c8ffacbb9c3c7986bf87541f71b43708
-
SHA512
fe8ef569b0b21d442c8aa697624fef1b1d9ef67219cbfb9951288a3f8bc1cc3aa8cb45e3e5f389dd0f770a8440c3acecf132a898151497ee98231bba679696c9
-
SSDEEP
768:KNz9CIR0/pC5Vy3QobbXtuo+z1aOyIZk7xzeIy:iDGBCEQobbXAvBBjiE9
Malware Config
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a035b0a1bc1a17963f71b0b590eed74a_JaffaCakes118
Files
-
a035b0a1bc1a17963f71b0b590eed74a_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ