C:\Users\AlexP\Desktop\Projects\StealthPE\Release\Test.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b08515b547635b8c3a42813fd50451aa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b08515b547635b8c3a42813fd50451aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b08515b547635b8c3a42813fd50451aa_JaffaCakes118
-
Size
7KB
-
MD5
b08515b547635b8c3a42813fd50451aa
-
SHA1
09f5673bb187b9d859795f8796daf012d3626963
-
SHA256
a13a352499c1998dc5afa27d69a3b59426583cf2357b26b9ec1b8700e81e397c
-
SHA512
9a0b54d2b4e066d34df2ec8a2a062485ac200a28eeea97a14b974c016392d30d13af0e8d1e3fa9887a95cf03cf4191743a4ed51f31d0d5d359fc98de79f239e6
-
SSDEEP
96:EwtBttQt2yEln1KN4uqJ0cdohpD1ucn+jEfSZoLzrwbJ4vRDCtmg:NtfOtElgs0XhOcn+jvZyzrwF4Za
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b08515b547635b8c3a42813fd50451aa_JaffaCakes118
Files
-
b08515b547635b8c3a42813fd50451aa_JaffaCakes118.exe windows:5 windows x86 arch:x86
d7599a97741284bbfd93b403913e1abc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcr100
?terminate@@YAXXZ
_unlock
__dllonexit
_crt_debugger_hook
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
printf
_lock
sprintf_s
_getch
memset
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ