C:\repos\Other\AsyncRAT-C#\DotNetUpdaterClient\obj\Release\DotNetUpdaterClient.pdb
Behavioral task
behavioral1
Sample
aa96614e29aa680d06e0e7db6582379b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
aa96614e29aa680d06e0e7db6582379b_JaffaCakes118
-
Size
41KB
-
MD5
aa96614e29aa680d06e0e7db6582379b
-
SHA1
fb9c41317cf3d956f903127219a8e16f822c7239
-
SHA256
07a19efcf7b2e7191e0c536ebebcf94ba3b9232989b7685783040fb7e3fa764c
-
SHA512
67e56565ecbebff88073cefcf8ed613e1e1b60489a15a4d79e3c75b3588e24eb607e13d32c05641369d91ccc0046e496c8567e63b858348779d21bee2b2daadb
-
SSDEEP
768:P79VCBWGdirZtmxzLvyV0gPvkUyjbvFcTFRnnoa:pAirZ0wV0g7ebvFi7
Malware Config
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa96614e29aa680d06e0e7db6582379b_JaffaCakes118
Files
-
aa96614e29aa680d06e0e7db6582379b_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ