F:\asp.net\DBGame\DBGame\obj\Debug\DBGame.pdb
Overview
overview
3Static
static
3web/Center.js
windows7-x64
3web/Center.js
windows10-2004-x64
3web/GroupUse_Edit.asp
windows7-x64
3web/GroupUse_Edit.asp
windows10-2004-x64
3web/Images/cookie.js
windows7-x64
3web/Images/cookie.js
windows10-2004-x64
3web/JS.js
windows7-x64
3web/JS.js
windows10-2004-x64
3web/Tab.asp
windows7-x64
3web/Tab.asp
windows10-2004-x64
3web/bin/As...er.dll
windows7-x64
1web/bin/As...er.dll
windows10-2004-x64
1web/bin/DBGame.dll
windows7-x64
1web/bin/DBGame.dll
windows10-2004-x64
1web/bin/en...es.dll
windows7-x64
1web/bin/en...es.dll
windows10-2004-x64
1web/bin/zh...es.dll
windows7-x64
1web/bin/zh...es.dll
windows10-2004-x64
1web/calendar.js
windows7-x64
3web/calendar.js
windows10-2004-x64
3web/calendar2.js
windows7-x64
3web/calendar2.js
windows10-2004-x64
3web/新云软件.url
windows7-x64
1web/新云软件.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
web/Center.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
web/Center.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
web/GroupUse_Edit.asp
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
web/GroupUse_Edit.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
web/Images/cookie.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
web/Images/cookie.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
web/JS.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
web/JS.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
web/Tab.asp
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
web/Tab.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
web/bin/AspNetPager.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
web/bin/AspNetPager.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
web/bin/DBGame.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
web/bin/DBGame.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
web/bin/en/AspNetPager.resources.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
web/bin/en/AspNetPager.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
web/bin/zh-CHT/AspNetPager.resources.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
web/bin/zh-CHT/AspNetPager.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
web/calendar.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
web/calendar.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
web/calendar2.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
web/calendar2.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
web/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
web/新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
d702377c1df0ed79da43e4fc5d5e8609_JaffaCakes118
-
Size
454KB
-
MD5
d702377c1df0ed79da43e4fc5d5e8609
-
SHA1
4f6bc2f57721e094cd854128b059512f48f3bb99
-
SHA256
000319651d6ee30a93ac4e1dfdea9c7e938fae77478c1ff79fded8d0bbd89058
-
SHA512
cd4da6a6b80e4b5095b85e5c008a77c81ad8dfb6ad063bed9616fe057d83421ce2b72de61f8cc7a2cc4dfa5bf8326ad8addcf8cdeb09fdd031b784cadd8b7fd2
-
SSDEEP
6144:TzJFEBpapWHla1lBk6qImrJDBql7kOIo7XBJ4bnd6Mz8EHP796pKsoZ7P9XF4Nbu:TzzQ8IPNDBAJFKbndfPpsoZToNu54hcH
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/web/bin/AspNetPager.dll unpack001/web/bin/DBGame.dll unpack001/web/bin/en/AspNetPager.resources.dll unpack001/web/bin/zh-CHT/AspNetPager.resources.dll
Files
-
d702377c1df0ed79da43e4fc5d5e8609_JaffaCakes118.rar
-
web/Admin.aspx
-
web/Admin_Add.aspx
-
web/Admin_Edit.aspx
-
web/Admin_Update.aspx
-
web/App_Data/GameDB.mdf
-
web/App_Data/GameDB_log.ldf
-
web/CSS.css
-
web/Center.aspx.js
-
web/Default.aspx.asp .js polyglot
-
web/GroupUse.aspx
-
web/GroupUseGet.aspx
-
web/GroupUse_Add.aspx
-
web/GroupUse_AllAdd.aspx
-
web/GroupUse_AllDown.aspx
-
web/GroupUse_Edit.aspx.asp
-
web/GroupUse_Sell.aspx
-
web/Images/001.gif.gif
-
web/Images/002.gif.gif
-
web/Images/003.gif.gif
-
web/Images/11.gif.gif
-
web/Images/22.gif.gif
-
web/Images/33.gif.gif
-
web/Images/back.gif.gif
-
web/Images/bg.gif.gif
-
web/Images/cookie.js.js
-
web/Images/del.gif.gif
-
web/Images/edt.gif.gif
-
web/Images/exit.gif.gif
-
web/Images/first.gif.gif
-
web/Images/go.gif.gif
-
web/Images/item.gif.gif
-
web/Images/last.gif.gif
-
web/Images/login_01.jpg.jpg
-
web/Images/login_02.gif.gif
-
web/Images/login_05.gif.gif
-
web/Images/login_06.gif.gif
-
web/Images/login_07.gif.gif
-
web/Images/login_08.gif.gif
-
web/Images/login_09.gif.gif
-
web/Images/login_09_1.gif.gif
-
web/Images/login_10.gif.gif
-
web/Images/login_10_1.gif.gif
-
web/Images/login_11.gif.gif
-
web/Images/login_12.gif.gif
-
web/Images/main_01.gif.gif
-
web/Images/main_02.gif.gif
-
web/Images/main_03.gif.gif
-
web/Images/main_05.gif.gif
-
web/Images/main_06.gif.gif
-
web/Images/main_07.gif.gif
-
web/Images/main_07_1.gif.gif
-
web/Images/main_08.gif.gif
-
web/Images/main_08_1.gif.gif
-
web/Images/main_09.gif.gif
-
web/Images/main_10.gif.gif
-
web/Images/main_10_1.gif.gif
-
web/Images/main_11.gif.gif
-
web/Images/main_11_1.gif.gif
-
web/Images/main_12.gif.gif
-
web/Images/main_12_1.gif.gif
-
web/Images/main_13.gif.gif
-
web/Images/main_13_1.gif.gif
-
web/Images/main_14.gif.gif
-
web/Images/main_14_1.gif.gif
-
web/Images/main_15.gif.gif
-
web/Images/main_16.gif.gif
-
web/Images/main_18.gif.gif
-
web/Images/main_24.gif.gif
-
web/Images/main_26.gif.gif
-
web/Images/main_28.gif.gif
-
web/Images/main_29.gif.gif
-
web/Images/main_34.gif.gif
-
web/Images/main_35.gif.gif
-
web/Images/main_37.gif.gif
-
web/Images/main_41.gif.gif
-
web/Images/main_41_1.gif.gif
-
web/Images/main_43.gif.gif
-
web/Images/main_45.gif.gif
-
web/Images/main_46.gif.gif
-
web/Images/main_48.gif.gif
-
web/Images/main_50.gif.gif
-
web/Images/main_51.gif.gif
-
web/Images/next.gif.gif
-
web/Images/tab_03.gif.gif
-
web/Images/tab_05.gif.gif
-
web/Images/tab_07.gif.gif
-
web/Images/tab_12.gif.gif
-
web/Images/tab_15.gif.gif
-
web/Images/tab_17.gif.gif
-
web/Images/tab_18.gif.gif
-
web/Images/tab_19.gif.gif
-
web/Images/tab_20.gif.gif
-
web/Images/tb.gif.gif
-
web/Images/title1.gif.gif
-
web/Images/title2.gif.gif
-
web/Images/topbg.gif.gif
-
web/Images/tree.gif.gif
-
web/Images/treeLine.gif.gif
-
web/Images/user.gif.gif
-
web/JS.js.js
-
web/Left.aspx.asp .js polyglot
-
web/Main.aspx
-
web/Out.aspx
-
web/Page.aspx
-
web/Personnel.aspx
-
web/PersonnelCount.aspx
-
web/PersonnelUse.aspx
-
web/PersonnelUseGet.aspx
-
web/PersonnelUse_Add.aspx
-
web/PersonnelUse_Edit.aspx
-
web/Personnel_Add.aspx
-
web/Personnel_AllAdd.aspx
-
web/Personnel_AllDown.aspx
-
web/Personnel_Edit.aspx
-
web/Produce.aspx
-
web/Produce_Add.aspx
-
web/Produce_Edit.aspx
-
web/Sell.aspx
-
web/SellCount.aspx
-
web/Sell_Add.aspx
-
web/Sell_Edit.aspx
-
web/Server.aspx
-
web/Tab.aspx.asp
-
web/Top.aspx.asp .js polyglot
-
web/Web.config.xml
-
web/bin/AspNetPager.XML.xml
-
web/bin/AspNetPager.dll.dll .js windows:4 windows x86 arch:x86 polyglot
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
web/bin/DBGame.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
web/bin/DBGame.pdb
-
web/bin/en/AspNetPager.resources.dll.dll .js windows:4 windows x86 arch:x86 polyglot
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
web/bin/zh-CHT/AspNetPager.resources.dll.dll .js windows:4 windows x86 arch:x86 polyglot
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
web/calendar.js.js
-
web/calendar2.js.js
-
web/新云软件.url.url
-
使用说明.txt