D:\wwwroot\DXTB\DXControls\obj\Debug\DXControls.pdb
Overview
overview
3Static
static
3Global.asp
windows7-x64
3Global.asp
windows10-2004-x64
3bin/DXControls.dll
windows7-x64
1bin/DXControls.dll
windows10-2004-x64
1bin/test.dll
windows7-x64
1bin/test.dll
windows10-2004-x64
1bin/非常...��.url
windows7-x64
1bin/非常...��.url
windows10-2004-x64
1dxtb/editor.js
windows7-x64
3dxtb/editor.js
windows10-2004-x64
3dxtb/help.html
windows7-x64
1dxtb/help.html
windows10-2004-x64
1dxtb/main.js
windows7-x64
3dxtb/main.js
windows10-2004-x64
3dxtb/replace.html
windows7-x64
1dxtb/replace.html
windows10-2004-x64
1dxtb/rm.htm
windows7-x64
1dxtb/rm.htm
windows10-2004-x64
1dxtb/selcolor.html
windows7-x64
1dxtb/selcolor.html
windows10-2004-x64
1dxtb/specialchar.html
windows7-x64
1dxtb/specialchar.html
windows10-2004-x64
1dxtb/swf.htm
windows7-x64
1dxtb/swf.htm
windows10-2004-x64
1dxtb/table.html
windows7-x64
1dxtb/table.html
windows10-2004-x64
1dxtb/wmv.htm
windows7-x64
1dxtb/wmv.htm
windows10-2004-x64
1dxtb/非�...��.url
windows7-x64
1dxtb/非�...��.url
windows10-2004-x64
1test.asp
windows7-x64
3test.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Global.asp
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Global.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
bin/DXControls.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
bin/DXControls.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
bin/test.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
bin/test.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
bin/非常世纪资源网.url
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
bin/非常世纪资源网.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
dxtb/editor.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
dxtb/editor.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
dxtb/help.html
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
dxtb/help.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
dxtb/main.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
dxtb/main.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
dxtb/replace.html
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
dxtb/replace.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
dxtb/rm.htm
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
dxtb/rm.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
dxtb/selcolor.html
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
dxtb/selcolor.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
dxtb/specialchar.html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
dxtb/specialchar.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
dxtb/swf.htm
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
dxtb/swf.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
dxtb/table.html
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
dxtb/table.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
dxtb/wmv.htm
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
dxtb/wmv.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
dxtb/非常世纪资源网.url
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
dxtb/非常世纪资源网.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
test.asp
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
test.asp
Resource
win10v2004-20240704-en
General
-
Target
33c67a55d4d54193a3b9b827d8b620c1_JaffaCakes118
-
Size
53KB
-
MD5
33c67a55d4d54193a3b9b827d8b620c1
-
SHA1
0d8ae64a4e374cafb7c4cbe7b6827eb2d89d6bc6
-
SHA256
05b449d0644090e1d2efef27b0d7bca36f8d96a9826147e503a0ebd46bf57406
-
SHA512
0f181cb7e96fb4e1979e694f39643e50a91a49c2e8c217eeae140f948f9bc7cbe88313763118fe80ab44983913e012ba507180a27cb20789905ab20c084ac8f3
-
SSDEEP
1536:ZBGBya72tNZ/+7HTEEKEy8kyrZxQqj55s0G:ZBGBaTAlK4j55o
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/bin/DXControls.dll unpack001/bin/test.dll
Files
-
33c67a55d4d54193a3b9b827d8b620c1_JaffaCakes118.rar
-
AssemblyInfo.cs
-
Global.asax.asp
-
Global.asax.cs
-
Global.asax.resx.xml
-
Web.config.xml
-
bin/DXControls.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/test.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Documents and Settings\computer\VSWebCache\DANSIN\DXTB\obj\Debug\test.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/test.pdb
-
bin/下载说明.htm.html .js polyglot
-
bin/非常世纪资源网.url.url
-
dxtb/editor.css
-
dxtb/editor.js.js
-
dxtb/help.html.html
-
dxtb/images/Help.gif
-
dxtb/images/Previous.gif.gif
-
dxtb/images/Rect.gif.gif
-
dxtb/images/about.gif.gif
-
dxtb/images/ad.gif.gif
-
dxtb/images/aleft.gif.gif
-
dxtb/images/aright.gif.gif
-
dxtb/images/bold.gif.gif
-
dxtb/images/bullist.gif.gif
-
dxtb/images/center.gif.gif
-
dxtb/images/cleancode.gif.gif
-
dxtb/images/closedfolder.gif.gif
-
dxtb/images/code.gif.gif
-
dxtb/images/copy.gif.gif
-
dxtb/images/cut.gif.gif
-
dxtb/images/delete.gif.gif
-
dxtb/images/deletecolumn.gif.gif
-
dxtb/images/deleterow.gif.gif
-
dxtb/images/fbcolor.gif.gif
-
dxtb/images/fgcolor.gif.gif
-
dxtb/images/guest_pic.gif.gif
-
dxtb/images/hr.gif.gif
-
dxtb/images/ico.gif.gif
-
dxtb/images/img.gif.gif
-
dxtb/images/indent.gif.gif
-
dxtb/images/insertcolumn.gif.gif
-
dxtb/images/insertpage.gif.gif
-
dxtb/images/insertrow.gif.gif
-
dxtb/images/italic.gif.gif
-
dxtb/images/line.gif.gif
-
dxtb/images/minus.gif.gif
-
dxtb/images/mode.design.gif.gif
-
dxtb/images/mode.html.gif.gif
-
dxtb/images/mode.view.gif.gif
-
dxtb/images/mov.gif.gif
-
dxtb/images/numlist.gif.gif
-
dxtb/images/openedfolder.gif.gif
-
dxtb/images/outdent.gif.gif
-
dxtb/images/paste.gif.gif
-
dxtb/images/plus.gif.gif
-
dxtb/images/quote.gif.gif
-
dxtb/images/redo.gif.gif
-
dxtb/images/removeFormat.gif.gif
-
dxtb/images/replace.gif.gif
-
dxtb/images/rm.gif.gif
-
dxtb/images/selectAll.gif.gif
-
dxtb/images/separator.gif.gif
-
dxtb/images/spacer.gif.gif
-
dxtb/images/specialchar.gif.gif
-
dxtb/images/strikethrough.gif.gif
-
dxtb/images/subscript.gif.gif
-
dxtb/images/supermaster_pic.gif.gif
-
dxtb/images/superscript.gif.gif
-
dxtb/images/swf.gif.gif
-
dxtb/images/table.gif.gif
-
dxtb/images/top_bg1.gif.gif
-
dxtb/images/underline.gif.gif
-
dxtb/images/undo.gif.gif
-
dxtb/images/unlink.gif.gif
-
dxtb/images/upload.gif.gif
-
dxtb/images/wlink.gif.gif
-
dxtb/images/wmv.gif.gif
-
dxtb/main.js.js
-
dxtb/nc_selcolor.htm.html .js polyglot
-
dxtb/pop.css
-
dxtb/replace.html.html
-
dxtb/rm.htm.html
-
dxtb/selcolor.html.html .js polyglot
-
dxtb/specialchar.html.html .js polyglot
-
dxtb/swf.htm.html
-
dxtb/table.html.html .js polyglot
-
dxtb/wmv.htm.html
-
dxtb/下载说明.htm.html .js polyglot
-
dxtb/非常世纪资源网.url.url
-
test.aspx.asp
-
test.aspx.cs
-
test.aspx.resx.vbs .xml polyglot
-
test.csproj
-
test.csproj.webinfo
-
test.sln
-
下载说明.htm.html .js polyglot
-
使用方法.txt
-
非常世纪资源网.url.url