C:\Documents and Settings\Administrator\My Documents\Visual Studio 2005\Projects\校内小蜘蛛\校内小蜘蛛\obj\Release\校内小蜘蛛.pdb
Static task
static1
Behavioral task
behavioral1
Sample
新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
校内小蜘蛛2.1.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
校内小蜘蛛2.1.exe
Resource
win10v2004-20240802-en
General
-
Target
e1eeb7ccb32c50a887d23c0a2a444827_JaffaCakes118
-
Size
25KB
-
MD5
e1eeb7ccb32c50a887d23c0a2a444827
-
SHA1
d22d81360c9275cf007dbf14944ad5fee62d8029
-
SHA256
a38fc5485bd111f0d300c4e256798bbd4efd60a346024484a9b1830de284ffa4
-
SHA512
0a9a751ddd301f59431bdd418bc0f04f01ffee77a549f5e7ff4ca508f52ecf286b23cf35a813b85eef213d8a4f37242b72dae0682d268ec1a814f22e223f040b
-
SSDEEP
768:W2KFvys2dlUOHq5/v/CiyUxEkX0T6Nsh80scUYyQxa:WRFvWlUOeXCiyUxEC8Gsh8TYla
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/校内小蜘蛛2.1.exe
Files
-
e1eeb7ccb32c50a887d23c0a2a444827_JaffaCakes118.rar
-
使用说明.txt
-
新云软件.url.url
-
校内小蜘蛛2.1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ