C:\Users\MY\Documents\Visual Studio 2010\Projects\AppCos\AppCos\obj\x86\Debug\AppCos.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6d7fa944e9a17f0ae00c821c5c8c1541_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
6d7fa944e9a17f0ae00c821c5c8c1541_JaffaCakes118
-
Size
1.1MB
-
MD5
6d7fa944e9a17f0ae00c821c5c8c1541
-
SHA1
274f3b46c568650a558b97cc33fd675fb9ff24c2
-
SHA256
c8beb8bb5806e0f3cc73560b3e8c1af753991b17b52c8e8a5ed0eb1ef9ea7ebb
-
SHA512
3ede0205a4b671c5d767d51bc5c990560ff2656c3dc0b631184be8d65f10d0cf19331c7300eb459124be589462dda9d4fb6399e7726af599a46f24afe26f448b
-
SSDEEP
12288:ZNdxlPT6ZYgGDHOlh8YbHlmZoQK342qY0+7O9g4pzRAT6jL1wCGCO2VdsLJZcuGK:ZNdxkSAE57O2VPun3NRYngUFO/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6d7fa944e9a17f0ae00c821c5c8c1541_JaffaCakes118
Files
-
6d7fa944e9a17f0ae00c821c5c8c1541_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 141B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ