E:\A\_work\694\s\src\Microsoft.TestPlatform.Utilities\obj\Release\net451\Microsoft.TestPlatform.Utilities.pdb
Static task
static1
Behavioral task
behavioral1
Sample
742dddbb8dfa6ac7125c8f7de7197163c111ee6d8f1ff4ff0382db223c8461a8.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_08b37186bf5900314ff26172bfc0f2ff35a2f61ec2bd1be1e2c7031af9bf5358
-
Size
854KB
-
MD5
5fbce37a34ef2077e44daa6a82f6d361
-
SHA1
ea1033d23f1b3678f0ee57c0b1e00dce947c5286
-
SHA256
08b37186bf5900314ff26172bfc0f2ff35a2f61ec2bd1be1e2c7031af9bf5358
-
SHA512
8f9ec9d28dcdc079c24a59f35eee7ad6956fcc105386ee5957d3530283bc50dc07d4e368b5e906bf9e67c9d91a4e60d851c2969dacde49b19d597b0608e44938
-
SSDEEP
24576:jbi+SHAFxwhOruEqLtXos5HmIlZbeVk6/qY:jbi+gK/nqLtpjeqQqY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/742dddbb8dfa6ac7125c8f7de7197163c111ee6d8f1ff4ff0382db223c8461a8
Files
-
JaffaCakes118_08b37186bf5900314ff26172bfc0f2ff35a2f61ec2bd1be1e2c7031af9bf5358.zip
Password: infected
-
742dddbb8dfa6ac7125c8f7de7197163c111ee6d8f1ff4ff0382db223c8461a8.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 919KB - Virtual size: 918KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ