Static task
static1
Behavioral task
behavioral1
Sample
Navicat.for.MySQL.v8.0.20.Cracked-iNViSiBLE/iNViSiBLE/navicat.for.mysql.8.0.20-patch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Navicat.for.MySQL.v8.0.20.Cracked-iNViSiBLE/iNViSiBLE/navicat.for.mysql.8.0.20-patch.exe
Resource
win10v2004-20240419-en
General
-
Target
14527b0e5737db5f3a2e405a2527ca9a_JaffaCakes118
-
Size
167KB
-
MD5
14527b0e5737db5f3a2e405a2527ca9a
-
SHA1
e493785988d5e86d19e03fdbacd172f2e22bb365
-
SHA256
623ffedd8dd740a0852cf24af60dc272b518d44f11fc5669719d2a7408c42ee6
-
SHA512
6fbefc13695e1df262357a4e0f4540521cf1f9c370cff8cb49ce115f90cc550351aaf9d1fd6899c1fddfa8be34d6a6c4489d39c46b01758568601749a9f667a2
-
SSDEEP
3072:rhrN4VqvcnmbIVdYCbjC1cxfZAwREjb4KvYG6CHQlfiDCgMjFlt:VrjcoIVdYouqEmusKvYGDwlfijMjPt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Navicat.for.MySQL.v8.0.20.Cracked-iNViSiBLE/iNViSiBLE/navicat.for.mysql.8.0.20-patch.exe
Files
-
14527b0e5737db5f3a2e405a2527ca9a_JaffaCakes118.zip
-
Navicat.for.MySQL.v8.0.20.Cracked-iNViSiBLE/file_id.diz
-
Navicat.for.MySQL.v8.0.20.Cracked-iNViSiBLE/iNViSiBLE/navicat.for.mysql.8.0.20-patch.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.iNV Size: 152B - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Navicat.for.MySQL.v8.0.20.Cracked-iNViSiBLE/inv.nfo
-
keygen.nfo