c:\timerstop\objfre_wlh_x86\i386\TimerStop.pdb
Overview
overview
7Static
static
3How to ear...r.html
windows7-x64
1How to ear...r.html
windows10-2004-x64
1Vista Crac...RT.exe
windows7-x64
4Vista Crac...RT.exe
windows10-2004-x64
4Vista Crac...op.sys
windows7-x64
1Vista Crac...op.sys
windows10-2004-x64
1Vista Crac...te.lnk
windows7-x64
4Vista Crac...te.lnk
windows10-2004-x64
3Vista Crac...ut.lnk
windows7-x64
3Vista Crac...ut.lnk
windows10-2004-x64
7Vista Crac...TO.rtf
windows7-x64
4Vista Crac...TO.rtf
windows10-2004-x64
1Vista Crac...er.exe
windows7-x64
1Vista Crac...er.exe
windows10-2004-x64
1Vista Crac...pp.lnk
windows7-x64
4Vista Crac...pp.lnk
windows10-2004-x64
7Vista Crac...p2.rtf
windows7-x64
4Vista Crac...p2.rtf
windows10-2004-x64
1Vista Crac...p1.rtf
windows7-x64
4Vista Crac...p1.rtf
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
How to earn $86,000 in 1 year.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
How to earn $86,000 in 1 year.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Vista Crack (Final RTM 6000)/Data/CRACK START.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
Vista Crack (Final RTM 6000)/Data/CRACK START.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
Vista Crack (Final RTM 6000)/Data/Files/Crack/timerstop.sys
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
Vista Crack (Final RTM 6000)/Data/Files/Crack/timerstop.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Vista Crack (Final RTM 6000)/Data/Files/Windows Update.lnk
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Vista Crack (Final RTM 6000)/Data/Files/Windows Update.lnk
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
Vista Crack (Final RTM 6000)/Data/Files/cmd - Shortcut.lnk
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Vista Crack (Final RTM 6000)/Data/Files/cmd - Shortcut.lnk
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Vista Crack (Final RTM 6000)/Data/HOW_TO.rtf
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Vista Crack (Final RTM 6000)/Data/HOW_TO.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Vista Crack (Final RTM 6000)/Data/TextViewer.exe
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Vista Crack (Final RTM 6000)/Data/TextViewer.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
Vista Crack (Final RTM 6000)/Start Crack App.lnk
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
Vista Crack (Final RTM 6000)/Start Crack App.lnk
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Vista Crack (Final RTM 6000)/Step2.rtf
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
Vista Crack (Final RTM 6000)/Step2.rtf
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Vista Crack (Final RTM 6000)/step1.rtf
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
Vista Crack (Final RTM 6000)/step1.rtf
Resource
win10v2004-20240508-en
General
-
Target
06f1d52489662b3f1c61b1a00d56cab8_JaffaCakes118
-
Size
446KB
-
MD5
06f1d52489662b3f1c61b1a00d56cab8
-
SHA1
2c6894e18f7394e484eea5cc7e47d63b44388e48
-
SHA256
1c2f8148a966a82a656b7df8bd7c5841e76439ad256dc35a5c2bd53b9c200d1e
-
SHA512
f0a0497bc0eb553271971320c2ccc7f40ad1326de617fd8fc292369c5abd87df7d3fc5357e2be5ad3d3e161d63e60fadd00bac27c92a2a398a8f9199792110ea
-
SSDEEP
12288:218f4TKR4RbP62/IryoOquQXtkE6pH3h+Jbc:NfoRV/IrHuQdk1HcJo
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Vista Crack (Final RTM 6000)/Data/CRACK START.exe unpack001/Vista Crack (Final RTM 6000)/Data/Files/Crack/timerstop.sys unpack001/Vista Crack (Final RTM 6000)/Data/TextViewer.exe
Files
-
06f1d52489662b3f1c61b1a00d56cab8_JaffaCakes118.rar
-
How to earn $86,000 in 1 year.html
-
Vista Crack (Final RTM 6000)/Data/Autorun.inf
-
Vista Crack (Final RTM 6000)/Data/CD_Conf.ini
-
Vista Crack (Final RTM 6000)/Data/CRACK START.exe.exe windows:4 windows x86 arch:x86
fa4fc80b3d7c963fe3627e6f0a5181de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
version
GetFileVersionInfoA
msvfw32
DrawDibOpen
user32
MessageBeep
gdi32
GetObjectA
comdlg32
GetOpenFileNameA
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
shell32
DragQueryFileA
comctl32
ord17
oledlg
ord8
ole32
StgOpenStorageOnILockBytes
olepro32
ord253
oleaut32
SysStringLen
winmm
waveOutClose
Sections
.text Size: 244KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Vista Crack (Final RTM 6000)/Data/Files/600x.jpg.jpg
-
Vista Crack (Final RTM 6000)/Data/Files/About.txt
-
Vista Crack (Final RTM 6000)/Data/Files/Bios Boot Note.txt
-
Vista Crack (Final RTM 6000)/Data/Files/Check Crack.txt
-
Vista Crack (Final RTM 6000)/Data/Files/Crack Note.txt
-
Vista Crack (Final RTM 6000)/Data/Files/Crack/timerstop.sys.sys windows:6 windows x86 arch:x86
92660b27e4316e77681109444939038f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeTickCount
DbgPrint
KeInitializeTimer
KeSetTimer
KeCancelTimer
hal
KfRaiseIrql
KfLowerIrql
Sections
.text Size: 512B - Virtual size: 419B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 147B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 294B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Vista Crack (Final RTM 6000)/Data/Files/How To Crack.txt
-
Vista Crack (Final RTM 6000)/Data/Files/Set Bios & Install.txt
-
Vista Crack (Final RTM 6000)/Data/Files/Windows Update.lnk.lnk
-
Vista Crack (Final RTM 6000)/Data/Files/cmd - Shortcut.lnk.lnk
-
Vista Crack (Final RTM 6000)/Data/Files/desktop.ini
-
Vista Crack (Final RTM 6000)/Data/Files/verify command.txt
-
Vista Crack (Final RTM 6000)/Data/HOW_TO.rtf.rtf
-
Vista Crack (Final RTM 6000)/Data/Start.txt
-
Vista Crack (Final RTM 6000)/Data/TextViewer.exe.exe windows:4 windows x86 arch:x86
a4737a5b41693dacc29fa93d1da35de7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DestroyIcon
gdi32
DeleteObject
comdlg32
GetSaveFileNameA
winspool.drv
DocumentPropertiesA
advapi32
GetFileSecurityA
shell32
ExtractIconA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
SysStringLen
Sections
.text Size: 132KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Vista Crack (Final RTM 6000)/Data/Torrent_downloaded_from_Demonoid.com.txt
-
Vista Crack (Final RTM 6000)/Readme.txt
-
Vista Crack (Final RTM 6000)/Start Crack App.lnk.lnk
-
Vista Crack (Final RTM 6000)/Step2.rtf.rtf
-
Vista Crack (Final RTM 6000)/Torrent_downloaded_from_Demonoid.com.txt
-
Vista Crack (Final RTM 6000)/step1.rtf.rtf