C:\Users\Administrator\Documents\Visual Studio 2010\Projects\Carmen\Carmen\obj\x86\Release\Apollo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8d8c928d447e8a694c79328d7e122ff9_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8d8c928d447e8a694c79328d7e122ff9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8d8c928d447e8a694c79328d7e122ff9_JaffaCakes118
-
Size
301KB
-
MD5
8d8c928d447e8a694c79328d7e122ff9
-
SHA1
82bb323b94c72ddf249082c97b53a6ec8c13591b
-
SHA256
355005818618c65083bbbe8a72c6d4d47ce880b3ca01cc7aae00b714d83c45e3
-
SHA512
46e841230ed48b45858bd333022f6fae5b9e3cd3812769af70f07f2dd532c18dc71291a77bc0b9328581ef384ac2d3569cc016e3c6be3f89cd218d3197a6aefb
-
SSDEEP
6144:rQXLW+rwbYR/czh+VfURknPQcg/tDOSnCUcEQ:r6J8YRI+VfUanP7HSnCCQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8d8c928d447e8a694c79328d7e122ff9_JaffaCakes118
Files
-
8d8c928d447e8a694c79328d7e122ff9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 154B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ