D:\Slichice\Hakovanje\[2010] Hakovanje\Ecryption\S-Norton3\obj\x86\Release\S-Norton3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2bee9df1419903f140ff65c7703c874e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2bee9df1419903f140ff65c7703c874e_JaffaCakes118
-
Size
838KB
-
MD5
2bee9df1419903f140ff65c7703c874e
-
SHA1
bfacd5769eeadd2e23338f0940ac90e4bc9aec7c
-
SHA256
f55becb79884a973b1119216aeb951fb088cc8abf41a8e31550eccbde3ba78d3
-
SHA512
67421befb7337b6959b58e4f6dd906e32330d03b361645e365fc8c52dfd282af353e43fb0152285d462356a352232aec5d454826fe6745341b3d62fab1fa7694
-
SSDEEP
24576:hnJi0+xxQCj7Kc2ckATjAC+HpFkSJVv1t/2JrbEO0L4lnfjZmR:FJi0+xxQCfHhkATjAC+HpFkSJVv1ZE/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bee9df1419903f140ff65c7703c874e_JaffaCakes118
Files
-
2bee9df1419903f140ff65c7703c874e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 141B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 795KB - Virtual size: 795KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ