C:\Documents and Settings\Rom\Bureau\Crypter Private\Infinity\Infinity\obj\x86\Release\Dodo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b41855fc6ebd31d422444b21b84a1074_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b41855fc6ebd31d422444b21b84a1074_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b41855fc6ebd31d422444b21b84a1074_JaffaCakes118
-
Size
494KB
-
MD5
b41855fc6ebd31d422444b21b84a1074
-
SHA1
07219f6a6a5bd17258f44e5f2f77db99f682b91b
-
SHA256
21694f4534cb5a7621f4e5a1ac070dff6998901f2afe88c99e6ec6eca815852c
-
SHA512
352f7d1e05e7edc4c147b2e28cb9a3eae60b899e30c42eb0dd7806a1b1ddeeb9d933fe000ade069dadd37278632a9ba9f720d7cc26d62ed0a954e20faece568b
-
SSDEEP
6144:y7722eEWxVBOnlDzi26u0TCT3/ICI+d1U1Bw9TGyiEdqf5xRl9M19e3yhuq/:fBGRziL7eTACIw1KwQyiEdm3RDQe/q/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b41855fc6ebd31d422444b21b84a1074_JaffaCakes118
Files
-
b41855fc6ebd31d422444b21b84a1074_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 490KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ