C:\Users\Administrator\Desktop\WinQuestion\WinQuestion\obj\Debug\WinQuestion.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a57059121da1c80b6a2f29007c279aad_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a57059121da1c80b6a2f29007c279aad_JaffaCakes118
-
Size
37KB
-
MD5
a57059121da1c80b6a2f29007c279aad
-
SHA1
441764fbb00f2817776432ea6b4a35ea5b2c0d85
-
SHA256
50bd4097d131a0cb93d9e6d7fa5ee6e5f32009841c34dd92928e2b0677ebb1be
-
SHA512
2fdbbf71bfb75815b8c1cffe0380b0a1c89bacfa9e752eac4bc8b9650a3cc18916c04855e54e2d8ff5e2be8bfed18fe720eb0cf2ce515ea88428043f9f39bc2c
-
SSDEEP
384:Fs2gHU9E6nPdcKN9AVH84ijuMCQQ/T746gfqRVb+d0E7hOh257xAookwMawAlK43:HwDTAyVboD37FSKYmediLe7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a57059121da1c80b6a2f29007c279aad_JaffaCakes118
Files
-
a57059121da1c80b6a2f29007c279aad_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ