Static task
static1
Behavioral task
behavioral1
Sample
project2.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
project2.doc
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/bin/Debug/第二个大作业.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/bin/Debug/第二个大作业.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
第二个大作业.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
第二个大作业.exe
Resource
win10v2004-20240426-en
General
-
Target
78eb49d0626e8e107a50736678e20766_JaffaCakes118
-
Size
1.5MB
-
MD5
78eb49d0626e8e107a50736678e20766
-
SHA1
cd0d1d6f68eed9130f3b98a471d90f9348c51566
-
SHA256
723e511e8758630d92dbbbf01dc8d618d8439223c09883da4172a0f6fdaec335
-
SHA512
b515ac6ce448d56abe583669063ffb079bafd87c96e2e587cccb9d617be17790632dca188a071d4ca26243fafbfa98aa2c34c690b457f2e5ae6dde222074c2a8
-
SSDEEP
24576:AvE/dAkmybaA0YNataFYLiQsKWPaJ6YyDZ2osX4sKWPaJ6YyDZ2osXd5G1+nXMCb:AMvbaA0YmLiQszpDAX4szpDAXd5S+XMQ
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/第二个大作业 可操作的碳化硅 化学机器人 刘家辉/bin/Debug/第二个大作业.exe unpack001/第二个大作业.exe
Files
-
78eb49d0626e8e107a50736678e20766_JaffaCakes118.rar
-
project2.doc.doc windows office2003
-
报告中的图片/image001.png.png
-
报告中的图片/image003.png.png
-
报告中的图片/image005.png.png
-
报告中的图片/image007.png.png
-
报告中的图片/image009.png.png
-
报告中的图片/image011.png.png
-
报告中的图片/image013.png.png
-
报告中的图片/image015.png.png
-
报告中的图片/image017.png.png
-
报告中的图片/image019.png.png
-
报告中的图片/image021.png.png
-
报告中的图片/image023.png.png
-
报告中的图片/image025.png.png
-
报告中的图片/image027.png.png
-
报告中的图片/image029.jpg.jpg
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/bin/Debug/第二个大作业.exe.exe windows:4 windows x86 arch:x86
15b3e6b822d37020e8a2c646360baba8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glut32
__glutInitWithExit
__glutCreateWindowWithExit
__glutCreateMenuWithExit
glutSolidSphere
glutSolidCube
glutSolidCone
glutWireTorus
glutSwapBuffers
glutPostRedisplay
glutInitDisplayMode
glutInitWindowSize
glutInitWindowPosition
glutReshapeFunc
glutDisplayFunc
glutKeyboardFunc
glutIdleFunc
glutMainLoop
glu32
gluLookAt
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetThreadContext
GetThreadPriority
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
_fdopen
_read
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_beginthreadex
_cexit
_endthreadex
_errno
_filelengthi64
_fstati64
_ftime
_iob
_lseeki64
_onexit
_setjmp
_setmode
abort
atexit
atoi
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putwc
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strtod
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
opengl32
glClear
glClearColor
glColor3b
glColor3d
glCullFace
glDepthFunc
glEnable
glFrustum
glLightfv
glLoadIdentity
glMaterialfv
glMatrixMode
glPopMatrix
glPushMatrix
glRotated
glScaled
glScalef
glTranslated
glTranslatef
glViewport
Sections
.text Size: 506KB - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 27KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/41 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/67 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/91 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/main.cpp
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/obj/Debug/main.o
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/碳化硅化学机器人.cbp.xml
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/碳化硅化学机器人.depend
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/碳化硅化学机器人.layout.xml
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/第二个大作业.depend
-
第二个大作业 可操作的碳化硅 化学机器人 刘家辉/第二个大作业.layout.xml
-
第二个大作业.exe.exe windows:4 windows x86 arch:x86
15b3e6b822d37020e8a2c646360baba8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glut32
__glutInitWithExit
__glutCreateWindowWithExit
__glutCreateMenuWithExit
glutSolidSphere
glutSolidCube
glutSolidCone
glutWireTorus
glutSwapBuffers
glutPostRedisplay
glutInitDisplayMode
glutInitWindowSize
glutInitWindowPosition
glutReshapeFunc
glutDisplayFunc
glutKeyboardFunc
glutIdleFunc
glutMainLoop
glu32
gluLookAt
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetThreadContext
GetThreadPriority
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
_fdopen
_read
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_beginthreadex
_cexit
_endthreadex
_errno
_filelengthi64
_fstati64
_ftime
_iob
_lseeki64
_onexit
_setjmp
_setmode
abort
atexit
atoi
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putwc
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strtod
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
opengl32
glClear
glClearColor
glColor3b
glColor3d
glCullFace
glDepthFunc
glEnable
glFrustum
glLightfv
glLoadIdentity
glMaterialfv
glMatrixMode
glPopMatrix
glPushMatrix
glRotated
glScaled
glScalef
glTranslated
glTranslatef
glViewport
Sections
.text Size: 506KB - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 27KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/41 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/67 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/91 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ