D:\360企业云盘同步版\VB\桓台二中校园管理平台\dll库\卸载程序\ConsoleApplication1\obj\x86\Debug\卸载教研辅助.pdb
Static task
static1
Behavioral task
behavioral1
Sample
43b2d64a0380c98c3a60d146bf28b3aa_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
43b2d64a0380c98c3a60d146bf28b3aa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
43b2d64a0380c98c3a60d146bf28b3aa_JaffaCakes118
-
Size
15KB
-
MD5
43b2d64a0380c98c3a60d146bf28b3aa
-
SHA1
419dd8ec76c790427de2d32c97bfbf5d8ec7c2ee
-
SHA256
266c1f0ded8a5d7e794e342a27000dac8cb6f9162e16fdf1d6eb63dc649adf51
-
SHA512
b5756f9fb256b4380ab2eae3fa05451b0edba9dedcfe4a34f7f8e0128748c7fddf0d062be282d796c0a21bb481592088642e216e4d107c128600ef6fcf0c0511
-
SSDEEP
384:q/58PZDkptgXTDkwaFcwaQ+LRn6+x1/6:pBDAOXnkNcB13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b2d64a0380c98c3a60d146bf28b3aa_JaffaCakes118
Files
-
43b2d64a0380c98c3a60d146bf28b3aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 191B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ