D:\Current Crypters\2012\2012 D2\2012 D2\obj\x86\Release\2012.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ddc4f196be6147367d0082a434777784_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddc4f196be6147367d0082a434777784_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddc4f196be6147367d0082a434777784_JaffaCakes118
-
Size
226KB
-
MD5
ddc4f196be6147367d0082a434777784
-
SHA1
bf8a4f342674f3e0cef7898ebffdd27d9e976ccd
-
SHA256
53e510fe72a47dce4dbdf7bbe022901a01df6b189c750d49fbf7c68948f4697c
-
SHA512
e16d4d1bdd02ff0ec29c9e9d0f0509060448df7b3b0af6df8298f39ea03c29fd9988da8624286a8dfa2734408f23b30a28fbf0fdbe81ae6197a3fe066844890d
-
SSDEEP
3072:+YDnm1leQ4Pi/2H+5Qe2YMIdAEQWyJavl9HSoluEZg74joz9cQMOLrK8S76jHerv:+clY+H+R2Cp9H9vZgaQ7MObSWj+r8sV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddc4f196be6147367d0082a434777784_JaffaCakes118
Files
-
ddc4f196be6147367d0082a434777784_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 487KB - Virtual size: 486KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ