D:\Divers\VB_VC-Prog\Kapitel 29\29.2.1\29.2.1\obj\x86\Release\29.2.1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
00e5791ae2d8af2b6bab146378a77b3a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00e5791ae2d8af2b6bab146378a77b3a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00e5791ae2d8af2b6bab146378a77b3a_JaffaCakes118
-
Size
18KB
-
MD5
00e5791ae2d8af2b6bab146378a77b3a
-
SHA1
9acff3bf65a1453677d83ccc978e5e778525a5c4
-
SHA256
5a5bd5a0d5ad14707ece8dd4a7b80f04430fbbe879c895ca08b8a3ef7060f3b2
-
SHA512
22d0ec4a26aa22c59f8bbfc4cf35fc8cce3178f97a1c268d4dd14a43bb697b7235d678ad48167348acaf19623bdb28aca389dab39f5fb2bf83b294925d7dc652
-
SSDEEP
192:XfIvdnNyMt4hfx6D8dja12lhcJkkZmKLKnloYU49/7tIhf7oI5v8as4Sh9HXcd:XfIPZ4hxf2QW3Lf49/xQf7b8GS73c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00e5791ae2d8af2b6bab146378a77b3a_JaffaCakes118
Files
-
00e5791ae2d8af2b6bab146378a77b3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 125B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ