C:\Users\Jasen\documents\visual studio 2010\Projects\Windows 7 SBB Tool\Windows 7 SBB Tool\obj\x86\Release\Windows 7 SBB Tool.pdb
Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
Windows 7 SBB Tool.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Windows 7 SBB Tool.exe
Resource
win10v2004-20240704-en
General
-
Target
285f0c5a1aea4fff6e34df96e16ed220_JaffaCakes118
-
Size
112KB
-
MD5
285f0c5a1aea4fff6e34df96e16ed220
-
SHA1
855bb78f538c64195c4f17fca44b355cc48cf03b
-
SHA256
36720c9eb42e719a35fc4a7e42447e3b2ccdfc960a9f0f401060cddf3abb1026
-
SHA512
b6a10bdd265f268fe1f58384d3caca6dbed6480cec3db6ddf293667794c8c270d3b664c9563c3d37a6f83d508e45d6c9ce55456d5530e35285a86835ea9432c9
-
SSDEEP
3072:A0YPg7QHcuqw55gwGHJ6atD2UQ0TCXfhpeALI3OAXuo9tXg2:Qg7QHcuqw5KlHJdKUQnXpruuo9tg2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Windows 7 SBB Tool.exe
Files
-
285f0c5a1aea4fff6e34df96e16ed220_JaffaCakes118.rar
-
155绿色软件站.url.url
-
Windows 7 SBB Tool.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ