C:\Users\florian\AppData\Local\Temporary Projects\stub\obj\Release\stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
abd0a551a83bf34b693e5bd62dc12072_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
abd0a551a83bf34b693e5bd62dc12072_JaffaCakes118
-
Size
807KB
-
MD5
abd0a551a83bf34b693e5bd62dc12072
-
SHA1
c85284944c0685f52462b67ebe4ee696277416c4
-
SHA256
bba0042db7a44929c2e07ed45cd934d71048aabc228bcc899ec77713f6a35d51
-
SHA512
d89261e60ed3f19fbd4cb8de44a8c37746241be65856c2ca140e73405d0bfef4c44e982f437c4440cdccaca8bb70d20af96bcb47f78875d09e932b8f2a85f2eb
-
SSDEEP
24576:pkMevGqDJiNAeAlU+oupOh2v31SG/k5lr+f:pktvGKI6zpOg31DUk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abd0a551a83bf34b693e5bd62dc12072_JaffaCakes118
Files
-
abd0a551a83bf34b693e5bd62dc12072_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ