C:\Users\Administrator\Desktop\Client\Temp\aCODNTwVoc\src\obj\x86\Debug\CallContextRemotingDa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ad2bc9259c1e585d4f57ef642ba39761_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ad2bc9259c1e585d4f57ef642ba39761_JaffaCakes118
-
Size
1.3MB
-
MD5
ad2bc9259c1e585d4f57ef642ba39761
-
SHA1
4908cd9062033ff9754bb44524843ba1aecf2312
-
SHA256
10a9b096a58113207c7609d58e6e9b5c83e819357fe2dee6f92a02dc63b65d74
-
SHA512
e1fbafff8f5d949fd50cf51053997a4561de9c5208775300e8efe0f15455d12b02ddabda61f6f220316676496d2c8d026f88ddd5914f47a7280babd2206ee298
-
SSDEEP
12288:qwzYSMYbRnmb4yyaPwUfcYG9mCEnqIT2fXdk/HmUVpJ03EVinI:qYYS9Ri4t+1qIT2fXdvOF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ad2bc9259c1e585d4f57ef642ba39761_JaffaCakes118
Files
-
ad2bc9259c1e585d4f57ef642ba39761_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ