C:\Users\Roshan\documents\visual studio 2010\Projects\Chrrm4\Chrrm4\obj\x86\Debug\Chrrm4.pdb
Static task
static1
Behavioral task
behavioral1
Sample
feccd98caef45d4750a01d204ec937c4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
feccd98caef45d4750a01d204ec937c4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
feccd98caef45d4750a01d204ec937c4_JaffaCakes118
-
Size
958KB
-
MD5
feccd98caef45d4750a01d204ec937c4
-
SHA1
0c149b2d03eb3f6ede1a3d754157551badaf8f36
-
SHA256
70c08be69579af4ffc51b99abe7066dd54e9a5c630a268aebb4e37c3b4a49a66
-
SHA512
a6a3c636be7863cdbf173f607ed9afc11b83ff21e0d7294d0bbb05f6977aa48c817dedfa3f1810798b8e10ada067641ba37ba98bab178dacf9cb0e6f2516b0b3
-
SSDEEP
12288:6f6dZ7vpeE3RPfAPip4O+dadZgBOdSJsOIwaxxCLK76lzKP7SdCTtQmznxoH3:m6dveE3RfAPihd1goAzGc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feccd98caef45d4750a01d204ec937c4_JaffaCakes118
Files
-
feccd98caef45d4750a01d204ec937c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ