C:\Users\ZOCKIR\Documents\Visual Studio 2008\Projects\ZOCKIR_trn\ZOCKIR_trn\obj\Debug\ZOCKIR_trn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Burnout Paradise UB_+4trn.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Burnout Paradise UB_+4trn.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
游侠网专题导航-游侠网中国单机游戏门户.url
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
游侠网专题导航-游侠网中国单机游戏门户.url
Resource
win10v2004-20240611-en
General
-
Target
a33df7013f981eed6a01d99b504838bd_JaffaCakes118
-
Size
175KB
-
MD5
a33df7013f981eed6a01d99b504838bd
-
SHA1
f70b25c843e4f011b18949bbcc5fafa4741f985f
-
SHA256
6f1e84986bb08080c3d4add92dc872a610dd2ade52930580620111e24306e837
-
SHA512
879aba0cbfc8cbf8f0f69dcfef420aa8120661c005ae9cdae4a65caeb3c8ae7df364b4ea286024f140b6be1fb0c3e1e320419a7148c905d62284c6c3b58a0373
-
SSDEEP
3072:DLac3mTNb+4fZ5Ds8TkyiIrVtpVZyXxkmEpUA0+pDItLSvNA5HYpW:DGc3m9+uookyiIZHVZAPEXdJItWvsHkW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Burnout Paradise UB_+4trn.exe
Files
-
a33df7013f981eed6a01d99b504838bd_JaffaCakes118.rar
-
ALI213.txt
-
Burnout Paradise UB_+4trn.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
游侠网专题导航-游侠网中国单机游戏门户.url.url