Static task
static1
Behavioral task
behavioral1
Sample
辩论赛计时软件_31/辩论赛计时软件_31.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
辩论赛计时软件_31/辩论赛计时软件_31.exe
Resource
win10v2004-20240419-en
General
-
Target
13f411907d7e90b674e28d7c533a9261_JaffaCakes118
-
Size
4.1MB
-
MD5
13f411907d7e90b674e28d7c533a9261
-
SHA1
eacf28ed5ce1199bdf76e0ce329ba17c605f6ffe
-
SHA256
33e294c365bebdaec1af9c22703d2496daeb16920eb742228be6dc3529f32d9e
-
SHA512
0a5694cef8411d1564e20ab7dfe6ddf5a5b8da40b6aeeff20448dc37de7d24332835af801edd7ffed58e36dcb1f595d5110dddd7a5245f659be02201275dfb13
-
SSDEEP
98304:iG6FRfkJSshvdgv8+m6sSoDgR46DFXqio/c+hq44299B5quNbvH5Trl:iGqfkJZkFwSoDgR4S5/iBU4DDbtFrl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/辩论赛计时软件_31/辩论赛计时软件_31.exe
Files
-
13f411907d7e90b674e28d7c533a9261_JaffaCakes118.rar
-
logo.gif.gif
-
下载使用说明.txt
-
辩论赛计时软件_31/PDS 文件格式详解.txt
-
辩论赛计时软件_31/Prize.mp3
-
辩论赛计时软件_31/Wait.mp3
-
辩论赛计时软件_31/[赛制模板v2]3陈词_自由辩论_总结.pds
-
辩论赛计时软件_31/[赛制模板v2]知己知彼_防守反击_短兵相见_一锤定音.pds
-
辩论赛计时软件_31/[赛制模板v2]立论_攻辩_小结_自由辩论_观众提问_总结.pds
-
辩论赛计时软件_31/[赛制模板v2]立论_法庭盘问_对话_盘问_小结_自由辩论_总结.pds
-
辩论赛计时软件_31/[赛制模板v2]立论_自由人_提问_小结_自由人对话_自由辩论_自由人_总结.pds
-
辩论赛计时软件_31/[赛制模板v2]自定义新赛制.pds
-
辩论赛计时软件_31/使用帮助.txt
-
辩论赛计时软件_31/辩论赛计时软件_31.exe.exe windows:4 windows x86 arch:x86
3d05135032f86cc84003861744e4f532
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 1.2MB
.idata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ