Static task
static1
Behavioral task
behavioral1
Sample
Saluz/Saluz Cracked.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Saluz/Saluz Cracked.exe
Resource
win10v2004-20240226-en
General
-
Target
acbdaf73ac1a905b2552e3a6232de11e_JaffaCakes118
-
Size
107KB
-
MD5
acbdaf73ac1a905b2552e3a6232de11e
-
SHA1
425e2d13a731e4b0bf8ca3c0dc103a35d8179836
-
SHA256
f32bd22a41e91aee3190d93627ba979008a187753b05ce29a5e7ba92e38451c8
-
SHA512
c6cf29cd54edf130a2f55d823ad80313a1f0a7879fed36e6a12962c013c1d5a46ff84dbbacfe1a1e06b59f27020e0686fca192c4d7580f66c9dce661e3cc4945
-
SSDEEP
1536:/dPYL9KCK5Qlz6uZ1+8xl5y/Z7o6lFO0LbHqj6v/FxriOnxvMvGsF2KVKFx9Zc:/dQLsC9zn1+7ao5LbKjYFBvUGNgKFxnc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Saluz/Saluz Cracked.exe
Files
-
acbdaf73ac1a905b2552e3a6232de11e_JaffaCakes118.zip
-
Saluz/README.txt
-
Saluz/Saluz Cracked.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Saluz/clicksounds/sound (1).wav
-
Saluz/clicksounds/sound (2).wav
-
Saluz/clicksounds/sound (3).wav
-
Saluz/clicksounds/sound (4).wav