D:\办公区\water1116\code\control\jfanDataGridView\jfanDataGridView\obj\Debug\jfanDataGridView.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DevComponents.DotNetBar2.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
DevComponents.DotNetBar2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
bak/新云软件.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
bak/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
jfanDataGridView.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
jfanDataGridView.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
房产中介管理系统.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
房产中介管理系统.exe
Resource
win10v2004-20240802-en
General
-
Target
b4c21382db92735d4c56e456d784d39d_JaffaCakes118
-
Size
1.5MB
-
MD5
b4c21382db92735d4c56e456d784d39d
-
SHA1
4ba4161623a730ba5743a567c6ded6c502840d0b
-
SHA256
145da4f4b429f1debc4fcf560a9963d835361a541f78276cf2bf1ea7aaaf4718
-
SHA512
f14c4300fa281c7531302d6254894dfe86c9c7c50d32f191556be07cad2f82b504cf60cdad57ef10b3c239a499518a454276c8cd3fccce027b2d4699a195e1cd
-
SSDEEP
24576:mg3ImHAhBnsLNSdES19jsG7z3H8jD7AovAb3sBwdmgONbgCBWHpNekHpFZfP2d9B:mg3IWNSdESPjsG7AjDEo4rd0NUC8ESdM
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/DevComponents.DotNetBar2.dll unpack001/jfanDataGridView.dll unpack001/房产中介管理系统.exe
Files
-
b4c21382db92735d4c56e456d784d39d_JaffaCakes118.rar
-
DevComponents.DotNetBar2.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bak/data.soften
-
bak/新云软件.url.url
-
jfanDataGridView.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
readme.txt
-
sqldata/house.mdf
-
sqldata/house_log.ldf
-
房产中介管理系统.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\房产中介管理系统\正式版\房产中介管理系统\房产中介管理系统\obj\Release\房产中介管理系统.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
房产中介管理系统.exe.config
-
房产中介管理系统.pdb
-
房产中介管理系统.xml