Overview
overview
8Static
static
7IT???.url
windows7-x64
6IT???.url
windows10-2004-x64
3IT???_????.url
windows7-x64
6IT???_????.url
windows10-2004-x64
3CC 2015 Cr...15.dmg
macos-10.15-amd64
4xf-accm201...-force
macos-10.15-amd64
1CC 2015 Cr...on.cmd
windows7-x64
8CC 2015 Cr...on.cmd
windows10-2004-x64
8CC 2015 Cr...15.exe
windows7-x64
7CC 2015 Cr...15.exe
windows10-2004-x64
7x-force_KE...14.dmg
macos-10.15-amd64
4xf-accm14/...-force
macos-10.15-amd64
4x-force_KE...14.exe
windows7-x64
7x-force_KE...14.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
IT???.url
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
IT???.url
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
IT???_????.url
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
IT???_????.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
CC 2015 Crack-OSX/xf-accm2015.dmg
Resource
macos-20240611-en
Behavioral task
behavioral6
Sample
xf-accm2015/xf-accm2015.app/Contents/MacOS/x-force
Resource
macos-20240611-en
Behavioral task
behavioral7
Sample
CC 2015 Crack-Windows/disable_activation.cmd
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
CC 2015 Crack-Windows/disable_activation.cmd
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
CC 2015 Crack-Windows/xf-adobecc2015.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
CC 2015 Crack-Windows/xf-adobecc2015.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-OSX/xf-accm2014.dmg
Resource
macos-20240611-en
Behavioral task
behavioral12
Sample
xf-accm14/xf-accm2014.app/Contents/MacOS/x-force
Resource
macos-20240611-en
Behavioral task
behavioral13
Sample
x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-Windows/xf-adobecc2014.exe
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-Windows/xf-adobecc2014.exe
Resource
win10v2004-20240508-en
General
-
Target
bd57cd67a7d6434039c3d7bca8d74dcb_JaffaCakes118
-
Size
280KB
-
MD5
bd57cd67a7d6434039c3d7bca8d74dcb
-
SHA1
6ff90e641eb90b3071b7cfba02d9196f29fd0597
-
SHA256
abb277c464a38b61b47c3dfe6bea9ac0d7caa1efa3b1f57a84ea24337fc4322c
-
SHA512
33058d4dfb063676d70d0cf925ab8c173ca9cc3d9a01db40501fbbd70466f3b08f0188a777c0593c4e6ba0ef4b4cab19808bc88fb8747a6e2e2b87ac33003cf4
-
SSDEEP
6144:3RXiExNg99AkZOkRNPX7rt7LEf0iQ/c6I+QZWmjYZtWA8NBM:lxy9+AOkRRft3y0icIBhNC
Malware Config
Signatures
-
resource yara_rule static1/unpack006/CC 2015 Crack-Windows/xf-adobecc2015.exe upx static1/unpack001/x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-Windows/xf-adobecc2014.exe upx -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack006/CC 2015 Crack-Windows/xf-adobecc2015.exe unpack007/out.upx unpack001/x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-Windows/xf-adobecc2014.exe
Files
-
bd57cd67a7d6434039c3d7bca8d74dcb_JaffaCakes118.zip
-
IT???.url
-
IT???_????.url.url
-
x-force_KEYGEN_WIN_MAC/Adobe CC 2015???windows?mac_3987/??? CC 2015 Crack-OSX.zip.zip
-
CC 2015 Crack-OSX/disable_activation_osx
-
CC 2015 Crack-OSX/install.txt
-
CC 2015 Crack-OSX/xf-accm2015.dmg.dmg macos
-
xf-accm2015/.DS_Store
-
xf-accm2015/.fseventsd/00000000000fa23f.gz
-
00000000000fa23f
-
xf-accm2015/.fseventsd/00000000000fa240.gz
-
00000000000fa240
-
xf-accm2015/.fseventsd/fseventsd-uuid
-
xf-accm2015/.journal
-
xf-accm2015/.journal_info_block
-
xf-accm2015/xf-accm2015.app/Contents/Info.plist.xml
-
xf-accm2015/xf-accm2015.app/Contents/MacOS/x-force.macho macos arch:x86
-
xf-accm2015/xf-accm2015.app/Contents/PkgInfo
-
xf-accm2015/xf-accm2015.app/Contents/Resources/English.lproj/InfoPlist.strings
-
xf-accm2015/xf-accm2015.app/Contents/Resources/English.lproj/MainMenu.nib
-
xf-accm2015/xf-accm2015.app/Contents/Resources/main.icns
-
xf-accm2015/xf-accm2015.app/Contents/Resources/xforce.bmp
-
x-force_KEYGEN_WIN_MAC/Adobe CC 2015???windows?mac_3987/??? CC 2015 Crack-Windows.zip.zip
-
CC 2015 Crack-Windows/disable_activation.cmd
-
CC 2015 Crack-Windows/install.txt
-
CC 2015 Crack-Windows/xf-adobecc2015.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 548KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-OSX/disable_activation_osx
-
x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-OSX/xf-accm2014.dmg.dmg macos
-
xf-accm14/.DS_Store
-
xf-accm14/.fseventsd/0000000000006426.gz
-
0000000000006426
-
xf-accm14/.fseventsd/0000000000006427.gz
-
xf-accm14/.fseventsd/fseventsd-uuid
-
xf-accm14/.journal
-
xf-accm14/.journal_info_block
-
xf-accm14/xf-accm2014.app/Contents/Info.plist.xml
-
xf-accm14/xf-accm2014.app/Contents/MacOS/x-force.macho macos arch:x86
-
xf-accm14/xf-accm2014.app/Contents/PkgInfo
-
xf-accm14/xf-accm2014.app/Contents/Resources/English.lproj/InfoPlist.strings
-
xf-accm14/xf-accm2014.app/Contents/Resources/English.lproj/MainMenu.nib
-
xf-accm14/xf-accm2014.app/Contents/Resources/main.icns
-
xf-accm14/xf-accm2014.app/Contents/Resources/xforce.bmp
-
x-force_KEYGEN_WIN_MAC/x-force 2014_KEYGEN_WIN_MAC/Crack-Windows/xf-adobecc2014.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE