C:\Users\Eray\Desktop\update\obj\Debug\update.pdb
Behavioral task
behavioral1
Sample
c200677bdb3ba91a6dc7d4777dff00b8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c200677bdb3ba91a6dc7d4777dff00b8_JaffaCakes118
-
Size
1.1MB
-
MD5
c200677bdb3ba91a6dc7d4777dff00b8
-
SHA1
315bdba6bc78d21041ca5c4e7757d14e0a4b081b
-
SHA256
f02b03b5dea111d3144e268385baf2b48d0e4728c519ca8a3229306db3f0b834
-
SHA512
a04e8cfa99843e6d961a7f743af49f894928059651eb8c2001c091591cf0baa02da204f8eaef7e1b37f67748e64d3876a8299f7d0b35a3543cc460a0fd1c98f3
-
SSDEEP
24576:PDP+oZIcHxW1CtPSbfakSUo7QvSUo7gE:j+nxhNo7CNo7
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule sample agile_net -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c200677bdb3ba91a6dc7d4777dff00b8_JaffaCakes118
Files
-
c200677bdb3ba91a6dc7d4777dff00b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 886KB - Virtual size: 886KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ