Static task
static1
Behavioral task
behavioral1
Sample
极佳mysql ibdata1文件丢失恢复工具.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
极佳mysql ibdata1文件丢失恢复工具.exe
Resource
win10v2004-20240426-en
General
-
Target
36884f8e00988bcebfa7e28e66e1bb4f_JaffaCakes118
-
Size
4.9MB
-
MD5
36884f8e00988bcebfa7e28e66e1bb4f
-
SHA1
5fe0e1922f7ced81470619a0ce31d4cd1ee64c6b
-
SHA256
ed7f477a577de0f58d3be4dc1bf7915a64b5818cb22941418d056f8d2488c771
-
SHA512
0c5c2567b324b32b2b706e10932504e9fbc90a1171dddb85b9851fcd2ec362412bf6ba400df90c5bf62564dc626684ea0e8e96cb81698b554f6c91291b121a3b
-
SSDEEP
98304:sgcWhX7XbTl5A08mJNQW2F2nK2XinhB8M0j1M9XQTxc+RMouF8S0Wul:sg9bTHANmJu/F2nK2XUB8M0RBc+6ou6H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/极佳mysql ibdata1文件丢失恢复工具.exe
Files
-
36884f8e00988bcebfa7e28e66e1bb4f_JaffaCakes118.rar
-
极佳mysql ibdata1文件丢失恢复工具.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 578KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 329KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 911KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE