E:\listenSound\TalkSound - y\20171012MaxVersionBeta\思源电脑监控管理平台\1独立主控最佳版\关机按钮功能独立\Server\obj\Debug\WmiPlvSE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
67478704170072107ad9511007f1c170_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
67478704170072107ad9511007f1c170_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67478704170072107ad9511007f1c170_JaffaCakes118
-
Size
265KB
-
MD5
67478704170072107ad9511007f1c170
-
SHA1
e581d720f9dea43f7a72e61ef3aee38179154aae
-
SHA256
5e5e0b0de8ddf55645315d388af54fca62ac351b0a8ea44fcbbc22c538db98b2
-
SHA512
0e87445e5ae91db34fa2e79f76b45f545b74e3682d89db75a310412008c597d8967e38a686edba833bfab97a79640273b6cd05d04998e597a0bc868cd9ae293f
-
SSDEEP
6144:tpmk6KfO8W5keAOtoJFOWQ19VezP/7o7wMu:syOWo7nu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67478704170072107ad9511007f1c170_JaffaCakes118
Files
-
67478704170072107ad9511007f1c170_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ