C:\Users\smoke\IT\Coding\C\saint_C\Release\saint_C.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a383ea34fabbe16ef42b5d492f2ec61638419c76d504fe4aa39472485a312f92.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a383ea34fabbe16ef42b5d492f2ec61638419c76d504fe4aa39472485a312f92.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7984d01b7f0f39f4ff52e2c4f77f029fc78bb23e8cd33ce17d3e8dbaaea8eb96
-
Size
16KB
-
MD5
75ab2da0e2f4a9f7f46b672c7a217eea
-
SHA1
1a88884ac44924e136edb9764d9a054f7636347d
-
SHA256
7984d01b7f0f39f4ff52e2c4f77f029fc78bb23e8cd33ce17d3e8dbaaea8eb96
-
SHA512
1bb8079466a8329e9ad33a64bf7d1a5df676cbb2ce76930bb51d78666a978cad9911412d9c2709587539c5eac96744ca1e1e8af566ddde68b133a23053f0cfb3
-
SSDEEP
384:U0c0zB85V003QK/pBJccjWe6JGplV/vIe//Cpw6ngB6q37:HcUbCzj60VIqqa6ngp37
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a383ea34fabbe16ef42b5d492f2ec61638419c76d504fe4aa39472485a312f92
Files
-
JaffaCakes118_7984d01b7f0f39f4ff52e2c4f77f029fc78bb23e8cd33ce17d3e8dbaaea8eb96.zip
Password: infected
-
a383ea34fabbe16ef42b5d492f2ec61638419c76d504fe4aa39472485a312f92.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ