Behavioral task
behavioral1
Sample
cr-objective_edit_v6.02_key.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cr-objective_edit_v6.02_key.exe
Resource
win10v2004-20240426-en
General
-
Target
297d4e7e9c93d93686d28ae45c7b7107_JaffaCakes118
-
Size
45KB
-
MD5
297d4e7e9c93d93686d28ae45c7b7107
-
SHA1
109d5777a5411586128df8a4f9b4e1c0a1a8ec91
-
SHA256
33500d6f9ed95ad9ab6b7a77a44905904c3b1057c0efc456680305a103788e9d
-
SHA512
6c72a0744c2f51bf0928c22ad848af0ca38113c9429e0e478672f554fe5245e4e2f28deed23a0383110e7a4ce46f855d86036263928a08eec1f1234b59875fb2
-
SSDEEP
768:BnIH4X8hqClid91FCv46Wil1Gk9eRCNj+RKMKJKD1anWevqhhTrwqLNV15xQE5:6YMhwD1FCA1inn9eQNj+RKVxWev6TrR3
Malware Config
Signatures
-
resource yara_rule static1/unpack002/cr-objective_edit_v6.02_key.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/cr-objective_edit_v6.02_key.exe unpack003/out.upx
Files
-
297d4e7e9c93d93686d28ae45c7b7107_JaffaCakes118.zip
-
CORE.NFO
-
FILE_ID.DIZ
-
cr-objective_edit_v6.02_key.zip.zip
-
cr-objective_edit_v6.02_key.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
readme.txt
-
keygen.nfo