C:\Documents and Settings\蒋琼芳\My Documents\Visual Studio 2008\Projects\FileSend\FileSend\obj\Release\FileSend.pdb
Static task
static1
Behavioral task
behavioral1
Sample
FileSend.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
FileSend.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Skin/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Skin/新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
efd8f4f61f1da0c5123265a5ba7e43b4_JaffaCakes118
-
Size
418KB
-
MD5
efd8f4f61f1da0c5123265a5ba7e43b4
-
SHA1
92520b4a7978a6220084bfca90c6e9bd614bab6b
-
SHA256
b4578d855afcbbf020dc61b81ff2821d62d79a37db8fcd5bc8f064a1021354b3
-
SHA512
1878f163a460d9174f2ebffe360cb14a3e119b1d40e1f9695571a3b16de50713a71cfd7487aee2809113d42a3e63a5f8b5f96ac84bfe57b59e138b56dcdd68f7
-
SSDEEP
12288:Vk6WQKYcRy2uDzmQabESFq7EbdDwufWUcCNa:W6WpFwDzmdXOEhDxfWUbNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FileSend.exe
Files
-
efd8f4f61f1da0c5123265a5ba7e43b4_JaffaCakes118.rar
-
Face/默认/0.jpg.jpg
-
Face/默认/1.jpg.jpg
-
Face/默认/10.jpg.jpg
-
Face/默认/100.jpg.jpg
-
Face/默认/101.jpg.jpg
-
Face/默认/102.jpg.jpg
-
Face/默认/103.jpg.jpg
-
Face/默认/104.jpg.jpg
-
Face/默认/105.jpg.jpg
-
Face/默认/106.jpg.jpg
-
Face/默认/107.jpg.jpg
-
Face/默认/108.jpg.jpg
-
Face/默认/109.jpg.jpg
-
Face/默认/11.jpg.jpg
-
Face/默认/110.jpg.jpg
-
Face/默认/111.jpg.jpg
-
Face/默认/112.jpg.jpg
-
Face/默认/113.jpg.jpg
-
Face/默认/114.jpg.jpg
-
Face/默认/115.jpg.jpg
-
Face/默认/116.jpg.jpg
-
Face/默认/117.jpg.jpg
-
Face/默认/118.jpg.jpg
-
Face/默认/119.jpg.jpg
-
Face/默认/12.jpg.jpg
-
Face/默认/120.jpg.jpg
-
Face/默认/121.jpg.jpg
-
Face/默认/122.jpg.jpg
-
Face/默认/123.jpg.jpg
-
Face/默认/124.jpg.jpg
-
Face/默认/125.jpg.jpg
-
Face/默认/126.jpg.jpg
-
Face/默认/127.jpg.jpg
-
Face/默认/128.jpg.jpg
-
Face/默认/129.jpg.jpg
-
Face/默认/13.jpg.jpg
-
Face/默认/130.jpg.jpg
-
Face/默认/131.jpg.jpg
-
Face/默认/132.jpg.jpg
-
Face/默认/133.jpg.jpg
-
Face/默认/134.jpg.jpg
-
Face/默认/14.jpg.jpg
-
Face/默认/15.jpg.jpg
-
Face/默认/16.jpg.jpg
-
Face/默认/17.jpg.jpg
-
Face/默认/18.jpg.jpg
-
Face/默认/19.jpg.jpg
-
Face/默认/2.jpg.jpg
-
Face/默认/20.jpg.jpg
-
Face/默认/21.jpg.jpg
-
Face/默认/22.jpg.jpg
-
Face/默认/23.jpg.jpg
-
Face/默认/24.jpg.jpg
-
Face/默认/25.jpg.jpg
-
Face/默认/26.jpg.jpg
-
Face/默认/27.jpg.jpg
-
Face/默认/28.jpg.jpg
-
Face/默认/29.jpg.jpg
-
Face/默认/3.jpg.jpg
-
Face/默认/30.jpg.jpg
-
Face/默认/31.jpg.jpg
-
Face/默认/32.jpg.jpg
-
Face/默认/33.jpg.jpg
-
Face/默认/34.jpg.jpg
-
Face/默认/35.jpg.jpg
-
Face/默认/36.jpg.jpg
-
Face/默认/37.jpg.jpg
-
Face/默认/38.jpg.jpg
-
Face/默认/39.jpg.jpg
-
Face/默认/4.jpg.jpg
-
Face/默认/40.jpg.jpg
-
Face/默认/41.jpg.jpg
-
Face/默认/42.jpg.jpg
-
Face/默认/43.jpg.jpg
-
Face/默认/44.jpg.jpg
-
Face/默认/45.jpg.jpg
-
Face/默认/46.jpg.jpg
-
Face/默认/47.jpg.jpg
-
Face/默认/48.jpg.jpg
-
Face/默认/49.jpg.jpg
-
Face/默认/5.jpg.jpg
-
Face/默认/50.jpg.jpg
-
Face/默认/51.jpg.jpg
-
Face/默认/52.jpg.jpg
-
Face/默认/53.jpg.jpg
-
Face/默认/54.jpg.jpg
-
Face/默认/55.jpg.jpg
-
Face/默认/56.jpg.jpg
-
Face/默认/57.jpg.jpg
-
Face/默认/58.jpg.jpg
-
Face/默认/59.jpg.jpg
-
Face/默认/6.jpg.jpg
-
Face/默认/60.jpg.jpg
-
Face/默认/61.jpg.jpg
-
Face/默认/62.jpg.jpg
-
Face/默认/63.jpg.jpg
-
Face/默认/64.jpg.jpg
-
Face/默认/65.jpg.jpg
-
Face/默认/66.jpg.jpg
-
Face/默认/67.jpg.jpg
-
Face/默认/68.jpg.jpg
-
Face/默认/69.jpg.jpg
-
Face/默认/7.jpg.jpg
-
Face/默认/70.jpg.jpg
-
Face/默认/71.jpg.jpg
-
Face/默认/72.jpg.jpg
-
Face/默认/73.jpg.jpg
-
Face/默认/74.jpg.jpg
-
Face/默认/75.jpg.jpg
-
Face/默认/76.jpg.jpg
-
Face/默认/77.jpg.jpg
-
Face/默认/78.jpg.jpg
-
Face/默认/79.jpg.jpg
-
Face/默认/8.jpg.jpg
-
Face/默认/80.jpg.jpg
-
Face/默认/81.jpg.jpg
-
Face/默认/82.jpg.jpg
-
Face/默认/83.jpg.jpg
-
Face/默认/84.jpg.jpg
-
Face/默认/85.jpg.jpg
-
Face/默认/86.jpg.jpg
-
Face/默认/87.jpg.jpg
-
Face/默认/88.jpg.jpg
-
Face/默认/89.jpg.jpg
-
Face/默认/9.jpg.jpg
-
Face/默认/90.jpg.jpg
-
Face/默认/91.jpg.jpg
-
Face/默认/92.jpg.jpg
-
Face/默认/93.jpg.jpg
-
Face/默认/94.jpg.jpg
-
Face/默认/95.jpg.jpg
-
Face/默认/96.jpg.jpg
-
Face/默认/97.jpg.jpg
-
Face/默认/98.jpg.jpg
-
Face/默认/99.jpg.jpg
-
FileSend.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 546KB - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Skin/EnergyBlue.gz.gz
-
EnergyBlue
-
Skin/StarryNight.gz.gz
-
StarryNight
-
Skin/WinXP.gz.gz
-
WinXP
-
Skin/新云软件.url.url
-
Skin/蓝色回忆.gz.gz
-
蓝色回忆
-
Sound/DownloadComplete.wav
-
Sound/Message.wav
-
Sound/Online.wav
-
Sound/Shake.wav