Static task
static1
Behavioral task
behavioral1
Sample
Crackme_v22_(mini-psyho).exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Crackme_v22_(mini-psyho).exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
keygen.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
keygen.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
src/make.bat
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
src/make.bat
Resource
win10v2004-20240419-en
General
-
Target
066a67f4d2252047f17b09de5348fa3c_JaffaCakes118
-
Size
81KB
-
MD5
066a67f4d2252047f17b09de5348fa3c
-
SHA1
699493379cb352ebf5f80aad0bb79fb1e1bb59b6
-
SHA256
0cdb75e8fee4f804934aa418866436cbd52eec722d6a7dffa181c4eb6dbaee86
-
SHA512
f24e281fcbba67d62771d7e5061825c366ee28520d347f6f131091fe98fe5a1414b45ad65c87a1068780e7ab6c065be3ab06c54dfe0a12f9b67608aa0afbabc5
-
SSDEEP
1536:zmjRcMwCCrBTZ04pCfEpmhW0fJFoxi12l27j:MRBYBd06WEpmYkToY12C
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/Crackme_v22_(mini-psyho).exe unpack001/keygen.exe
Files
-
066a67f4d2252047f17b09de5348fa3c_JaffaCakes118.zip
-
Crackme_v22_(mini-psyho)_veneta.zip.zip
-
Crackme_v22_(mini-psyho).exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
mbe.nfo
-
keygen.exe.exe windows:1 windows x86 arch:x86
8278f9caa95b819b3d2574bace77266d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleHandleA
RtlUnwind
user32
SetWindowTextA
DialogBoxParamA
EndDialog
GetDlgItem
SetDlgItemTextA
GetDlgItemTextA
SendDlgItemMessageA
SetFocus
crtdll
_iob
__GetMainArgs
calloc
exit
fgetc
fputc
free
raise
rand
signal
strcat
strchr
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 840B - Virtual size: 840B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
src/code.c
-
src/make.bat
-
src/resource.h
-
src/rsrc.res