Behavioral task
behavioral1
Sample
Aktywator office 1.3 2010.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Aktywator office 1.3 2010.exe
Resource
win10v2004-20240508-en
General
-
Target
052e7fe54eaf3520d59d8545674a7ca9_JaffaCakes118
-
Size
1.2MB
-
MD5
052e7fe54eaf3520d59d8545674a7ca9
-
SHA1
dd1fc0d6ec9a1e6a60810402cd832694bec1443d
-
SHA256
5df6844367c0296b3d3be8dbba710402a1109cc698173795e9faa23d53672d35
-
SHA512
22e068d5511780523d9f6e2a67884319a58564156a28a77fcdd745b46bbc4e76d63c3a57d184819234c1cda22b0a18593e0b4eaf85f31d5b8c4c31736a6993d7
-
SSDEEP
24576:4tIYL2zNif1yuHt9a4vqJEPAnTp6eL+PZJoqe0KiEimTE:elE09RN9a02rYJomyimTE
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Aktywator office 1.3 2010.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Aktywator office 1.3 2010.exe
Files
-
052e7fe54eaf3520d59d8545674a7ca9_JaffaCakes118.rar
-
Aktywator office 1.3 2010.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 988KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Instrukcja szczegółowa aktywacji aktywatorem.txt
-
screeny/1.JPG.jpg
-
screeny/2.JPG.jpg
-
screeny/3.JPG.jpg
-
screeny/4.JPG.jpg
-
screeny/5.JPG.jpg
-
screeny/6.JPG.jpg
-
screeny/Thumbs.db