C:\Users\Giovani\Desktop\Exploit Binder\Exploit\Exploit\Exploit\obj\Debug\Exploit.pdb
Behavioral task
behavioral1
Sample
JaffaCakes118_5af48ee7ac1ef36758a74efc76570d9d.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_5af48ee7ac1ef36758a74efc76570d9d
-
Size
1.6MB
-
MD5
5af48ee7ac1ef36758a74efc76570d9d
-
SHA1
33b760047351378f8818810ba4a526bf8fe3c3db
-
SHA256
28d63a1a66c4886e4d184bf63ba6f2ce06aa85c58a3b8bc58c5cf92c89bdcc64
-
SHA512
6a86f4283e75a1dd1db62f0d85119ce00cda63787c2e043ed85ca671dbf977a08c5cf29f23ade5119959979955e997251fae7ca4f8427c5c6643e988a553ac45
-
SSDEEP
24576:Dx03nIlcXgYZhukuph303nZupHxe9qee4fjV/9Oklf:Dx0ycXgYWFL0ce9/e4fvOa
Malware Config
Signatures
-
Cybergate family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5af48ee7ac1ef36758a74efc76570d9d
Files
-
JaffaCakes118_5af48ee7ac1ef36758a74efc76570d9d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ