D:\Study\OSEP\Projects\6- Introduction to Antivirus Evasion\6.6.2.1 Exercises\Non-emulated APIs - CreateMutex\Non-emulated APIs\obj\x64\Release\Non-emulated APIs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
df30460af48b57b025547d2554c530c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
df30460af48b57b025547d2554c530c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df30460af48b57b025547d2554c530c7_JaffaCakes118
-
Size
7KB
-
MD5
df30460af48b57b025547d2554c530c7
-
SHA1
c9ab8156aee3d8e36789deda9215da15d09dd521
-
SHA256
58aaa9c666b60104766c4422fd75280e7b62e3838b29b7f6426bf1b33619ccf8
-
SHA512
ce9582ca9bd35c5e649edc933bfc3c5adf8c5c53060d5f1288ca4c838d1a8fa5abf05fbc3f162983039092fe2fa955f6d46d538cd27f524f91b7afe91cc1fe98
-
SSDEEP
96:OTEnFJDasc8zXQsTBW4L+0Dv+HQOw8WnLRe8ivdw/2BF84zNt:O4nFJDasXgsTBDLDZOw8WnLRe8vZa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df30460af48b57b025547d2554c530c7_JaffaCakes118
Files
-
df30460af48b57b025547d2554c530c7_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ