D:\Published Softwares\Windows 7 Aero Blur Tweaker (W7ABT)\W7ABT\W7ABT\obj\Release\W7ABT.pdb
Overview
overview
5Static
static
3Theme/mave...le.dll
windows7-x64
1Theme/mave...le.dll
windows10-2004-x64
1Theme/mave...le.dll
windows7-x64
1Theme/mave...le.dll
windows10-2004-x64
1Theme/mave...11.dll
windows7-x64
1Theme/mave...11.dll
windows10-2004-x64
1Theme/mave...le.dll
windows7-x64
1Theme/mave...le.dll
windows10-2004-x64
1Theme/mave...le.dll
windows7-x64
1Theme/mave...le.dll
windows10-2004-x64
1Theme/mave..._w.dll
windows7-x64
1Theme/mave..._w.dll
windows10-2004-x64
1Tools/Wind...it.exe
windows7-x64
5Tools/Wind...it.exe
windows10-2004-x64
5Tools/Wind...it.exe
windows7-x64
5Tools/Wind...it.exe
windows10-2004-x64
5Static task
static1
Behavioral task
behavioral1
Sample
Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/en-US/shellstyle.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/en-US/shellstyle.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/shellstyle.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/shellstyle.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Theme/maverick_for_win7_by_dpcdpc11/maverick_for_win7_by_dpcdpc11.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Theme/maverick_for_win7_by_dpcdpc11/maverick_for_win7_by_dpcdpc11.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/en-US/shellstyle.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/en-US/shellstyle.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/shellstyle.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/shellstyle.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Theme/maverick_for_win7_by_dpcdpc11_w/maverick_for_win7_by_dpcdpc11_w.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Theme/maverick_for_win7_by_dpcdpc11_w/maverick_for_win7_by_dpcdpc11_w.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 32-bit.exe
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 32-bit.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 64-bit.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 64-bit.exe
Resource
win10v2004-20241007-en
General
-
Target
44adb6ed37174b81aecf584bdaf9897b_JaffaCakes118
-
Size
5.7MB
-
MD5
44adb6ed37174b81aecf584bdaf9897b
-
SHA1
2f2d0ddc89519dba17dfc469fc4a46c401c59b67
-
SHA256
799a14e425e4adf5a9a13ab21319eefe7c5041a6ad639ab24f8c6afb172871c4
-
SHA512
ee578c5c0d59b91fb1590bbac8e3db0ac2d5c95444f211a72bfd7220651a32a4799334d77adcb13f087304518cdefbb83f9feda9e94a85e26ad687b4dabf0602
-
SSDEEP
98304:jQ+5sQaPvXF1kZGNu8uamCn6xQDANI0o20066weWzQLERLzGEq5E2Hf44deK4MqC:75slHo8DmPxQDA6XB8LE9zGvE2HfbmMT
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/en-US/shellstyle.dll.mui unpack001/Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/shellstyle.dll unpack001/Theme/maverick_for_win7_by_dpcdpc11/maverick_for_win7_by_dpcdpc11.msstyles unpack001/Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/en-US/shellstyle.dll.mui unpack001/Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/shellstyle.dll unpack001/Theme/maverick_for_win7_by_dpcdpc11_w/maverick_for_win7_by_dpcdpc11_w.msstyles unpack001/Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 32-bit.exe unpack001/Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 64-bit.exe
Files
-
44adb6ed37174b81aecf584bdaf9897b_JaffaCakes118.rar
-
HOW TO!!!.txt
-
Maverick_for_Win7_preview.png.png
-
Resources/Fonts/DroidFonts/DroidSans-Bold.ttf
-
Resources/Fonts/DroidFonts/DroidSans.ttf
-
Resources/Fonts/DroidFonts/DroidSansMono.ttf
-
Resources/Fonts/DroidFonts/DroidSerif-Bold.ttf
-
Resources/Fonts/DroidFonts/DroidSerif-BoldItalic.ttf
-
Resources/Fonts/DroidFonts/DroidSerif-Italic.ttf
-
Resources/Fonts/DroidFonts/DroidSerif-Regular.ttf
-
Resources/Fonts/DroidFonts/NOTICE
-
Resources/Fonts/DroidFonts/README.txt
-
Resources/Fonts/Ubuntu/Ubuntu-B.ttf
-
Resources/Fonts/Ubuntu/Ubuntu-BI.ttf
-
Resources/Fonts/Ubuntu/Ubuntu-I.ttf
-
Resources/Fonts/Ubuntu/Ubuntu-R.ttf
-
Resources/Linux Ubuntu/Balloon.wav
-
Resources/Linux Ubuntu/Connect.wav
-
Resources/Linux Ubuntu/Default.wav
-
Resources/Linux Ubuntu/Disconnect.wav
-
Resources/Linux Ubuntu/Exclamation.wav
-
Resources/Linux Ubuntu/Menu popup.wav
-
Resources/Linux Ubuntu/error.wav
-
Resources/Linux Ubuntu/fail.wav
-
Resources/Linux Ubuntu/login.wav
-
Resources/Linux Ubuntu/logout.wav
-
Resources/Linux Ubuntu/new Mail.wav
-
Resources/Linux Ubuntu/question.wav
-
Resources/Linux Ubuntu/shutdown.wav
-
Resources/Linux Ubuntu/startup.wav
-
Resources/Navigation Buttons/Default.bmp
-
Resources/Navigation Buttons/Disabled.bmp
-
Resources/Navigation Buttons/Frame.bmp
-
Resources/Navigation Buttons/Go, Stop, Refresh, Dropdown.bmp
-
Resources/Navigation Buttons/Go.bmp
-
Resources/Navigation Buttons/Hover.bmp
-
Resources/Navigation Buttons/Pressed.bmp
-
Resources/Navigation Buttons/Stop Default.bmp
-
Resources/Navigation Buttons/Stop Hover.bmp
-
Resources/Navigation Buttons/Stop Pressed.bmp
-
Resources/Start Orb - Ubuntu/ubuntu.bmp
-
Resources/Start Orb - Ubuntu/ubuntu_preview.png.png
-
Resources/Wallpaper/warty-final-ubuntu-maverick.jpg.jpg
-
Theme/maverick_for_win7_by_dpcdpc11.theme
-
Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/en-US/shellstyle.dll.mui.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Theme/maverick_for_win7_by_dpcdpc11/Shell/NormalColor/shellstyle.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rsrc Size: 340KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Theme/maverick_for_win7_by_dpcdpc11/maverick_for_win7_by_dpcdpc11.msstyles.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1000KB - Virtual size: 999KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Theme/maverick_for_win7_by_dpcdpc11_w.theme
-
Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/en-US/shellstyle.dll.mui.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Theme/maverick_for_win7_by_dpcdpc11_w/Shell/NormalColor/shellstyle.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rsrc Size: 340KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Theme/maverick_for_win7_by_dpcdpc11_w/maverick_for_win7_by_dpcdpc11_w.msstyles.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1000KB - Virtual size: 999KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 32-bit.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 364KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tools/Windows 7 Aero Blur Tweaker/Windows 7 Aero Blur Tweaker 64-bit.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\Published Softwares\Windows 7 Aero Blur Tweaker (W7ABT)\W7ABT\W7ABT\obj\Release\W7ABT.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 468KB - Virtual size: 467KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ