C:\Users\kdglkrkjdfhslej\Documents\Visual Studio 2008\Projects\PRI\PRI\obj\Release\Cat.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f41ab658351a04d98a8801b5ab4e98d9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f41ab658351a04d98a8801b5ab4e98d9_JaffaCakes118
-
Size
406KB
-
MD5
f41ab658351a04d98a8801b5ab4e98d9
-
SHA1
e431926631829cbea065d53028a707bf477a5c49
-
SHA256
d606f82a6f0d3c831cbe557bc5ecc578d12e76c419596dac936dbc9954adf9e9
-
SHA512
764b857080b0d17c0eac836dd1ed70eb587286242e0a287cad0e33112c0dc9eb143bbab8dfdf022e1aa6e388efad0d4879e14b27ca7e4def89ea9507bbf847f3
-
SSDEEP
12288:opuvWBF7oLNS3NibJHcZJ+mrtuV41kfgjdkA:gu+HQCibJ8D+mZ+gjT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f41ab658351a04d98a8801b5ab4e98d9_JaffaCakes118
Files
-
f41ab658351a04d98a8801b5ab4e98d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 330KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ