c:\users\xeni\documents\visual studio 2013\Projects\WindowsApplication2\WindowsApplication2\obj\Debug\WindowsApplication2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_77896ae3f8c279318138693856013130.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_77896ae3f8c279318138693856013130
-
Size
910KB
-
MD5
77896ae3f8c279318138693856013130
-
SHA1
77411cae2b0a1e005f0b26f377307e635a04fc11
-
SHA256
05aa3940608a28808b6dd915992b1ccef500851d8ffa14639780dc861c6aff54
-
SHA512
430ed9307a9019fcadec5706f4f17c0d4d396b8a4273c9f31913301bdaa9157b9c86f47113b213ce69b801341685dca3ec3610503d43a16fbe0445a2e475a4da
-
SSDEEP
12288:ClfpHH+/eGLXjnRvj8PdFLrUfn8dMdx9GA9hGs3Toj5GSyaLhMu0svTVdKdUY87q:qxHHKnnR7gnG9GvMToDy8RdeUY87Zn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_77896ae3f8c279318138693856013130
Files
-
JaffaCakes118_77896ae3f8c279318138693856013130.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 895KB - Virtual size: 894KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ