C:\Users\darwinyu\SynologyDrive\OSEP\JScript_and_C\ConsoleApp1\obj\x64\Release\ShellCodeInCSharp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dad3a79b5d8846422b080f81e36ee0eb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dad3a79b5d8846422b080f81e36ee0eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dad3a79b5d8846422b080f81e36ee0eb_JaffaCakes118
-
Size
5KB
-
MD5
dad3a79b5d8846422b080f81e36ee0eb
-
SHA1
87908020f419232e69ce34c3fc5cc181b32f30f9
-
SHA256
2e44c99b230ec601a3694872d5ed11e88a09a985bafa41aa5d1b9dd604d8d024
-
SHA512
42ee17c06c2fb69373b8a66bfb9a3d4bfd853bcb7eacb376104e8e58ef909428fb2672c140fdab400fa5216a8f4754a6bc7ef77f3defc0f674cd894008b8c6bd
-
SSDEEP
48:6KTf1bO0sWbYR6oTvBkIFet5gvVNME9yQPl0a2TlGRmFbzR+3q8aiPkJUJERgtdP:lhOBR69IwE3JlWMmFZUkJcNlAzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dad3a79b5d8846422b080f81e36ee0eb_JaffaCakes118
Files
-
dad3a79b5d8846422b080f81e36ee0eb_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ