E:\Type\LessonProject.pdb
Static task
static1
Behavioral task
behavioral1
Sample
15b0bdb2bbe32e5032d78363305d146a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15b0bdb2bbe32e5032d78363305d146a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15b0bdb2bbe32e5032d78363305d146a_JaffaCakes118
-
Size
186KB
-
MD5
15b0bdb2bbe32e5032d78363305d146a
-
SHA1
7d2f2d2725b58efdf9d825f94eb3b447c675e022
-
SHA256
5c10b28e3a1ee7ea5e8aa5706cc0e9d098a13d30514dcf3bff7f76ea1b18c9e8
-
SHA512
273721c227148ca12b9b4e0dab27b185ca0ddfeb5a561587a1545ae6a7d3326c71dc81c993de0579caf9e53d75bd148e434495f84ccb91da3582eb42fe49af34
-
SSDEEP
3072:xUMO0BDlzqhMuWqrQCE8MLsuqDTIL3c5Vklbe+90oUS/m7cU8epP3eZ:aMO0poKb2QCkLHjcIly+JUAg8a3k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b0bdb2bbe32e5032d78363305d146a_JaffaCakes118
Files
-
15b0bdb2bbe32e5032d78363305d146a_JaffaCakes118.exe windows:5 windows x86 arch:x86
ebaf2dd5b89c253eea5509a614521a5e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameW
Exports
Exports
GeometryOutput
GeometryInput
?_238476@@YGPAEPAXJ@Z
?_283774@@YGPAEPAXJ@Z
?_293842@@YGPAEPAXJ@Z
?_29389@@YGPAEPAXJ@Z
?_32746@@YGPAEPAXJ@Z
?_328497@@YGPAEPAXJ@Z
?_38471555@@YGPAEPAXJ@Z
?_3882377@@YGPAEPAXJ@Z
?_3894655@@YGPAEPAXJ@Z
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 427B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ