C:\repos\Other\AsyncRAT-C#\DotNetUpdaterClient\obj\Release\DotNetUpdaterClient.pdb
Behavioral task
behavioral1
Sample
b366635f015b9d4caf0766e09c23d483_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b366635f015b9d4caf0766e09c23d483_JaffaCakes118
-
Size
33KB
-
MD5
b366635f015b9d4caf0766e09c23d483
-
SHA1
842cd2cd4ab2f3a4429de553fda61760fabdee9e
-
SHA256
58d62fc50d0ae5dbf5e8b9193c118129b2d8f39bc1600240beea4a18dcf9acd6
-
SHA512
bf16fd66bcfc5080a7d16f009ac03641620296fb07825604c2953423eadc8e24e4b0c968b90daedbb57f8786444d02f214a38c47e47d256e8957e7c184b533a6
-
SSDEEP
384:eaQg6jK7okXX7pCTfyFE6vXDChu2DBw8Y9POoGwDoO6+s4NmQyDYtQrZ2L+L0PlL:NnXRCx4NdEZ2KAjnX4hVbBPkOVy3
Malware Config
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b366635f015b9d4caf0766e09c23d483_JaffaCakes118
Files
-
b366635f015b9d4caf0766e09c23d483_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ