c:\users\георгий\documents\visual studio 2017\Projects\Dae\Dae\obj\Debug\Winserv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118
-
Size
10KB
-
MD5
fc3077e55a76f35b9aadcea770a35ad4
-
SHA1
4b6a4be07dacf88192a4754cbd215cfb73e13234
-
SHA256
fcd5a1f2661b07da5281b24dee53ffe0e9a90530fd390662acbd89816551e16e
-
SHA512
acb6679c2c0d2c77e6222351a9dab568c0b6588dc359b9276d2e10d2641de2b37c8a8b70f809b3c55133e3945a6144791f56cfdc91b591b4ee17ce4f21adf78c
-
SSDEEP
96:GrYTWO9O6Y9UBmA9SFWhJY38ea12hw+egOaRi0+VUUb5Hv/mivzX7N1bV7qzNt:B6mRMQmfWQja12y+z3RihDbLNjQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118
Files
-
fc3077e55a76f35b9aadcea770a35ad4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ