C:\Users\Tango\Desktop\Re-Enable v2\Re-Enable v2\obj\Release\Re-Enable v2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Re-Enable+v2.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Re-Enable+v2.exe
Resource
win10v2004-20240802-en
General
-
Target
fd10c58c7aac9e807536ade4a8fbd354_JaffaCakes118
-
Size
281KB
-
MD5
fd10c58c7aac9e807536ade4a8fbd354
-
SHA1
76ec879824a82b0e4985116ceae5df7ec17aea67
-
SHA256
a8a7ccf123605b0265a50b3b26bc282714edc663d655f92f007e46aba7816b16
-
SHA512
32a9a41b87210a030a3da9e7a7a95c8469100564c5106c2ed595d9554357d7742509b8a88ef76f019f378ebd4259bde17e01b8bbf20fa262f3d932d8f71afdb9
-
SSDEEP
6144:/iKcpPPPppRJQqNF3yoXWTUiPKDa5eEM1Ls6mo0HTy:/izpPPBeqN/WTUiPmanis6QHTy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Re-Enable+v2.exe
Files
-
fd10c58c7aac9e807536ade4a8fbd354_JaffaCakes118.rar
-
155绿色软件站.url.url
-
Re-Enable+v2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 683KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ