c:\Users\Administrator\Desktop\Project1\Project1\obj\Release\SearchFillterHost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
18ae95bc6add23b0b8e2b03095c898c1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
18ae95bc6add23b0b8e2b03095c898c1_JaffaCakes118
-
Size
670KB
-
MD5
18ae95bc6add23b0b8e2b03095c898c1
-
SHA1
d9b13aabfc99289ab52f53e8ad88604aa423d050
-
SHA256
a611ca6d5e9b1155330a8361cac724403a4b9cc814b410a4b5710edc672aed87
-
SHA512
829d4ef0fde8be964ebf1ea10a336167c1c99bff679760a5a932aaa130ffeb2a6183638900278d287d3985d11018f8322351d66e7a52c8674ed7863e255419b2
-
SSDEEP
12288:JHrkMA4ippbLsXRd668FhrHES49aCPpCkiPp8UFCM:JHrT724XR/oHT49a4wp8UFCM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 18ae95bc6add23b0b8e2b03095c898c1_JaffaCakes118
Files
-
18ae95bc6add23b0b8e2b03095c898c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 621KB - Virtual size: 621KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ