C:\Users\Gavin_2\Desktop\rsbots2\LockDown Crypter\LockDown Crypter\LockDown Crypter\obj\Release\LockDown Crypter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
defedacb03cb6fe6f23f2a483c850684_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
defedacb03cb6fe6f23f2a483c850684_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
defedacb03cb6fe6f23f2a483c850684_JaffaCakes118
-
Size
550KB
-
MD5
defedacb03cb6fe6f23f2a483c850684
-
SHA1
3d38fa4285c414d0c4b7e8b20494d1141867f857
-
SHA256
5a556b4a8d4ef4fd03b0f3f4b615a68def8d09204c11f3f86f2ab3be70939874
-
SHA512
e403c26c3f794fdfbcfcdf3c6c8a8e50c408928aa8f60bdecc54f2c1dc87aed85f3f14792568c2adf2536827ec037dd6cdc04a25ade70a5a518f45916aeb3395
-
SSDEEP
6144:FrD/vCFttC3q61vm+6qnMTqEjUsA1hT0fxjuXJxg+TLEjUsA1h50fxjuXJxg:uZqnfEjIhTrLEjIh5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource defedacb03cb6fe6f23f2a483c850684_JaffaCakes118
Files
-
defedacb03cb6fe6f23f2a483c850684_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 169B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ