C:\Users\Administrator\Desktop\Курсовая работа САПР\obj\Debug\MKKN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Folder for Atens New_ORDER/New_ORDER no.14 CG00902927.PDF.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_e4ceb1d65380cef41641057c7b69e7cbf5054054153f1cf2f4dc91f7e52ef21b
-
Size
360KB
-
MD5
f7f075c50c415628f85131fea2f8abcf
-
SHA1
6aaf86f93b271f7b10e31a49dcaca2cf74264094
-
SHA256
e4ceb1d65380cef41641057c7b69e7cbf5054054153f1cf2f4dc91f7e52ef21b
-
SHA512
43c751de57f691fbee06379b6fb897f62341af30865e2af36557a05374d9c067dd8f88cf95a8190fd2bd20954b639971d6a090d4738b2ffdcb9348a6f19520bc
-
SSDEEP
6144:4SIRnqWeR5tlOQV7wNNpCFES2Tq4B2zhvH6jeHtBqgpThEjG1ry2NjGcdrhRY81M:49a5tNSjCEfuKAajmxpTrhNjzNhGQdF0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/Folder for Atens New_ORDER/New_ORDER no.14 CG00902927.PDF.exe
Files
-
JaffaCakes118_e4ceb1d65380cef41641057c7b69e7cbf5054054153f1cf2f4dc91f7e52ef21b.zip
Password: infected
-
d85cabd949b7dc707bcb98cbf1b20fc4e260901351a4a696d152155801ed107a.zip
-
New_ORDER no.14 CG009029277.iso.iso
-
Folder for Atens New_ORDER/New_ORDER no.14 CG00902927.PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 427KB - Virtual size: 426KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ