d:\我的文档\PE\NetGeter\Release\NetGeter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
03265373779067a3e001524e74829363_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
03265373779067a3e001524e74829363_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03265373779067a3e001524e74829363_JaffaCakes118
-
Size
88KB
-
MD5
03265373779067a3e001524e74829363
-
SHA1
41c0920814bff5bd7a497b1fbdaa19f6b825732b
-
SHA256
dbe458c3e8bbba4c953fdad2dd03cdb3f2b6bd0a6d86699026cc17bc6ac52e14
-
SHA512
8ea1a584c75213e922e3e85bcf8869de3e6932aa766f07ad2860cb415954a439ae5f4d23a9a295512d43b0d02dd16f8a162f43359a17c4344fa542046fd3030b
-
SSDEEP
1536:bNSkgwBb24H8oSR0dRIaQ/g+cNaNLyPaMF1E+EYyauye:bGqb24cHYRIaeg+c8NMDE+EYybye
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03265373779067a3e001524e74829363_JaffaCakes118
Files
-
03265373779067a3e001524e74829363_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.Silvana Size: 219B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE