Static task
static1
Behavioral task
behavioral1
Sample
Release/Sql Poizon v1.1 - The Exploit Scanner.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Release/Sql Poizon v1.1 - The Exploit Scanner.exe
Resource
win10v2004-20240802-en
General
-
Target
b3a96d6450f7ad8ef88ad66ebc8c7b81_JaffaCakes118
-
Size
365KB
-
MD5
b3a96d6450f7ad8ef88ad66ebc8c7b81
-
SHA1
ee447e3adf108eaae5d98450c15efbb9a547db38
-
SHA256
93e406449e9a5c43ffbd4bf7bb054f3dae800fb1359f351afb000e7ec0ca5626
-
SHA512
86de26e77eda9b925d8049272477920bac86572daeee1e8f90714596dbc1330233b793283bc80f847a953d297534595ace38f27d999fecac47a8519d3d79312a
-
SSDEEP
6144:7c1GRNcyoV4EZY26yFN1C3PReQ5Op4jy92IXJv0oxDCqrp0mXpLjlhIVK67:wGRHoV4EZYSN40mOujy92IXJ8iGqrp07
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Release/Sql Poizon v1.1 - The Exploit Scanner.exe
Files
-
b3a96d6450f7ad8ef88ad66ebc8c7b81_JaffaCakes118.rar
-
Release/Asp.txt
-
Release/LFI.txt
-
Release/Php.txt
-
Release/RFI.txt
-
Release/Sql Poizon v1.1 - The Exploit Scanner.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Release/country_codes.txt
-
Release/sql-vulnerable-sites-0.txt
-
Release/sql-vulnerable-sites-1.txt
-
Release/sql-vulnerable-sites-10.txt
-
Release/sql-vulnerable-sites-11.txt
-
Release/sql-vulnerable-sites-12.txt
-
Release/sql-vulnerable-sites-2.txt
-
Release/sql-vulnerable-sites-3.txt
-
Release/sql-vulnerable-sites-4.txt
-
Release/sql-vulnerable-sites-5.txt
-
Release/sql-vulnerable-sites-6.txt
-
Release/sql-vulnerable-sites-7.txt
-
Release/sql-vulnerable-sites-8.txt
-
Release/sql-vulnerable-sites-9.txt
-
Release/sqlerr.txt