C:\Users\Gamer\AppData\Local\Temporary Projects\ColdTaker Injector CA 1.0\obj\Debug\ColdTaker Injector CA 1.0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e1002506feebdd948aa17c46898c95d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1002506feebdd948aa17c46898c95d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1002506feebdd948aa17c46898c95d2_JaffaCakes118
-
Size
344KB
-
MD5
e1002506feebdd948aa17c46898c95d2
-
SHA1
e0d334ce417cc53ee72ecbb4786846bf6bdb8b34
-
SHA256
43efba346335b1588f7a14863e37658002cd3efacf9f44de01fa269ae4c00d97
-
SHA512
6f09b038715f375c7c24fa84da6c15312779564d146c9318ed652373ebac73a2f84e7fdff537144babb86b24c6d07cdbeae88ad427a9a73b83ac941736db6a53
-
SSDEEP
6144:+Bi3bXExHcNc9VAMyB7UPAZ/CE74jAP0f+Y7M2NcL4+c5sWa:+Y3buYc96LBIW/5QAPGfp2k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1002506feebdd948aa17c46898c95d2_JaffaCakes118
Files
-
e1002506feebdd948aa17c46898c95d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 339KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ