Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
6Static
static
3ChangeIP/ChangeIP.exe
windows7-x64
6ChangeIP/ChangeIP.exe
windows10-2004-x64
6ChangeIP/diskop.dll
windows7-x64
6ChangeIP/diskop.dll
windows10-2004-x64
6ChangeIP/p...om.url
windows7-x64
6ChangeIP/p...om.url
windows10-2004-x64
3ChangeIP/windisk.dll
windows7-x64
6ChangeIP/windisk.dll
windows10-2004-x64
6ChangeIP/�...��.url
windows7-x64
1ChangeIP/�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ChangeIP/ChangeIP.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ChangeIP/ChangeIP.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ChangeIP/diskop.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
ChangeIP/diskop.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ChangeIP/piaodown.com.url
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
ChangeIP/piaodown.com.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
ChangeIP/windisk.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
ChangeIP/windisk.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
ChangeIP/飘荡精品软件.url
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
ChangeIP/飘荡精品软件.url
Resource
win10v2004-20240802-en
Target
0386731150d3e92c4b7c4fcc292ff7e3_JaffaCakes118
Size
54KB
MD5
0386731150d3e92c4b7c4fcc292ff7e3
SHA1
98a2fb70ddd561143acc5326b886cac1f0ba64a4
SHA256
bc74ba5c7cacbad5a3be61a33d258e2495edba5940f02705717e71a5c0257bce
SHA512
a7652497ea0425f8d788ba7377125acc65240bd64c38a51557ef9633315d0b3b9075519cdcd54c8d32b4ab13b34c62e3f093da5bcc78fac4c3ac53895283e7b1
SSDEEP
1536:lUgJQZKej4NKkTpqPldpkt1PR4HTT4BAdOG3X0UQ4:vSZKU4NXE3G1Z4Hf42d/3XI4
Checks for missing Authenticode signature.
resource |
---|
unpack001/ChangeIP/ChangeIP.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExRwLogicalDisk
ExFlushDisk
ExRWDisk
ExGetDiskInfo
ord1200
ord1168
ord1253
ord342
ord823
ord1182
ord825
ord5572
ord2915
ord4278
ord800
ord858
ord5710
ord2763
ord926
ord4204
ord537
ord540
ord2614
ord533
ord5194
ord798
ord2818
ord924
ord6407
ord2808
ord1997
ord860
ord5683
ord4129
sprintf
__CxxFrameHandler
fclose
fopen
vsprintf
_except_handler3
?terminate@@YAXXZ
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
_stricmp
FormatMessageA
GetVersionExA
OutputDebugStringA
GetModuleFileNameA
GetFileSize
GetModuleHandleA
GetProcAddress
WaitForSingleObject
WideCharToMultiByte
IsBadWritePtr
GetShortPathNameA
GetDriveTypeA
GetLogicalDriveStringsA
GetLastError
DeviceIoControl
CreateFileA
CloseHandle
GetLocalTime
wsprintfA
MessageBoxA
RegCreateKeyExA
RegFlushKey
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
??0CDiskIO@@QAE@H@Z
??0CExt@@QAE@ABV0@@Z
??0CExt@@QAE@PAVCDiskIO@@H@Z
??0CFAT16@@QAE@PAVCDiskIO@@H@Z
??0CFAT32@@QAE@PAVCDiskIO@@H@Z
??0CNTFS@@QAE@PAVCDiskIO@@H@Z
??0CNTpart@@QAE@PAVCDiskIO@@H@Z
??0CPartition@@QAE@PAVCDiskIO@@H@Z
??1CDiskIO@@QAE@XZ
??1CExt@@UAE@XZ
??1CFAT16@@QAE@XZ
??1CFAT32@@QAE@XZ
??1CNTFS@@QAE@XZ
??1CNTpart@@QAE@XZ
??1CPartition@@QAE@XZ
??4CDiskIO@@QAEAAV0@ABV0@@Z
??4CExt@@QAEAAV0@ABV0@@Z
??4CFAT16@@QAEAAV0@ABV0@@Z
??4CFAT32@@QAEAAV0@ABV0@@Z
??4CNTFS@@QAEAAV0@ABV0@@Z
??4CNTpart@@QAEAAV0@ABV0@@Z
??4CPartition@@QAEAAV0@ABV0@@Z
??_7CExt@@6B@
?CheckMFTFixup@CNTFS@@IAEKPAEK@Z
?ClusterVal@CFAT16@@QAEKK@Z
?ClusterVal@CFAT32@@QAEKK@Z
?ClusterVal@CNTFS@@QAEKK@Z
?ClusterVal@CNTpart@@QAEKK@Z
?ClusterVal@CPartition@@QAEKK@Z
?CreateContiFile@CFAT32@@QAEHPADKAAK@Z
?CreateSpecFile@CFAT32@@AAEHKKPADPAUFAT32SDirStr@@@Z
?DefragFile@CNTpart@@QAEHPADAAK@Z
?FindFile@CFAT32@@AAEHKPADPAUFAT32SDirStr@@@Z
?FindFreeBlock@CFAT32@@AAEKK@Z
?FindFreeBlock@CNTpart@@QAEKK@Z
?FlushDiskBuf@CFAT32@@QAEXXZ
?FlushDiskBuf@CNTpart@@QAEXXZ
?FreePtrMem@CNTFS@@AAEXXZ
?GetBlockUse@CExt@@QAEHI@Z
?GetDirRuns@CNTFS@@IAEKPAE0@Z
?GetFileRuns@CNTFS@@IAEKPAE0@Z
?GetLogicDriveInfo_98@CDiskIO@@QAEHEPAUDRIVE_MAP_INFO@@@Z
?GetLogicDriveInfo_Nt@CDiskIO@@QAEHDPAK0@Z
?GetMFTFileRuns@CNTFS@@IAEKAAUtag_MFTHEAD@@PAE@Z
?GetMFTHead@CNTFS@@IAEKPAUtag_MFTHEAD@@AA_K@Z
?GetMFTRecord@CNTFS@@IAEKPAEKPAD@Z
?GetNamefromMFTAttr@CNTFS@@IAEKPAEPADI@Z
?GetPartionStart@CDiskIO@@QAEHDAAK0@Z
?GetPartitionLetter@CDiskIO@@QAEXXZ
?GetPartitionNum@CDiskIO@@QAEHXZ
?GetPartitions@CDiskIO@@AAEHXZ
?GetRootFilePos@CFAT32@@QAEHPADPAKPAEI@Z
?GetRootFilePos@CNTFS@@QAEHPADPAKPAEI@Z
?GetRunsAllSize@CNTFS@@IAE_KPAEI@Z
?GetTotalSectors@CDiskIO@@QAEKXZ
?GetValidSectors@CFAT32@@QAEKXZ
?GetValidSectors@CNTpart@@QAEKXZ
?InitDiskInfo@CDiskIO@@QAEHXZ
?Initial@CExt@@QAEHXZ
?Initial@CFAT16@@QAEHXZ
?Initial@CFAT32@@QAEHXZ
?Initial@CNTFS@@QAEHXZ
?Initial@CNTpart@@QAEHXZ
?ListRootDirectory@CNTFS@@QAEKXZ
?MakeMemberFormRuns@CNTFS@@IAEXPAEAA_JAA_K@Z
?MoveCluster@CNTpart@@AAEHPAX_K1K@Z
?OpenVolume@CNTpart@@AAEHD@Z
?ParseExtendPartition@CDiskIO@@AAEEPAUSTRUCT_PARTITION@@EKE@Z
?ParseMasterPartition@CDiskIO@@AAEEPAUSTRUCT_PARTITION@@EKE@Z
?ReadCluster@CFAT32@@QAEKKGPAE@Z
?ReadDirRunstoMem@CNTFS@@IAEKPAE0@Z
?ReadSector@CDiskIO@@QAEKKGPAE@Z
?ReadSector@CPartition@@QAEKKGPAE@Z
?SearchFileFromRoot@CNTFS@@IAEKPADPAE@Z
?SearchRootDirectory@CNTFS@@IAEKXZ
?VerifyPartition@CDiskIO@@AAEHPAUSTRUCT_PARTITION@@KE@Z
?WriteCluster@CFAT32@@QAEKEKGPAE@Z
?WriteClusterVal@CFAT32@@QAEHKK@Z
?WriteSector@CDiskIO@@QAEKKGPAE@Z
?WriteSector@CPartition@@QAEKEKGPAE@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord3346
ord1197
ord1570
ord1253
ord2614
ord6467
ord1578
ord600
ord826
ord269
ord2396
ord5199
ord1116
ord1089
ord5300
ord5572
ord533
ord5194
ord798
ord2818
ord924
ord6407
ord2808
ord1997
ord2915
ord2725
ord3953
ord815
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord3922
ord5731
ord2512
ord2554
ord4079
ord5302
ord1255
ord4486
ord6375
ord4274
ord540
ord823
ord825
ord537
ord860
ord941
ord5683
ord4129
ord858
ord800
ord1243
ord1200
sprintf
__CxxFrameHandler
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_EH_prolog
??1type_info@@UAE@XZ
vsprintf
fopen
fclose
GetModuleHandleA
FormatMessageA
LocalAlloc
LocalFree
GetCurrentProcess
GetVersionExA
GetWindowsDirectoryA
GetLocalTime
GetLastError
FlushFileBuffers
GetLogicalDrives
LoadLibraryA
GetProcAddress
FreeLibrary
GetTempPathA
CopyFileA
Sleep
GetModuleFileNameA
GetShortPathNameA
SetFilePointer
ReadFile
CloseHandle
CreateFileA
DeviceIoControl
WriteFile
MessageBoxA
wsprintfA
RegFlushKey
RegCloseKey
DeleteService
ControlService
OpenServiceA
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
ExDetectProtect
ExFlushDisk
ExFlushPartNt
ExGetDiskInfo
ExRWDisk
ExRWDiskAbs
ExRWDiskAbs_H
ExRwLogicalDisk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ