c:\Users\user\Documents\Visual Studio 2013\Projects\ation44\ation44\obj\Debug\ation44.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eae536f4dbbfd54a08e16e2e92203324_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
eae536f4dbbfd54a08e16e2e92203324_JaffaCakes118
-
Size
561KB
-
MD5
eae536f4dbbfd54a08e16e2e92203324
-
SHA1
da8e9ed71efe650ef94815ad586773155e19cc97
-
SHA256
4f761ff41a36714a29f78688d1807351ac5783530dba666ab3ff214b87e3668b
-
SHA512
409bac9a2164ab6c23b88851ce548edd77b004ca51d6cdab812ad45c7f61671c7876f4243249e43e5121d3c0e2ad8b9ce98717f41f2b125770a325a706519712
-
SSDEEP
6144:2aYmv6zpATfTjsEEa/qeOaJbS032q//dldSoKS4+VDI82aIn:hH7yN0P/tSCRV+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eae536f4dbbfd54a08e16e2e92203324_JaffaCakes118
Files
-
eae536f4dbbfd54a08e16e2e92203324_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 559KB - Virtual size: 558KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ