C:\WindowsApplication3\WindowsApplication3\obj\Debug\KeygenPocketAlarm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PocketAlarm.v2.18.5.PPC.Incl.Keygen/Keygen.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PocketAlarm.v2.18.5.PPC.Incl.Keygen/Keygen.exe
Resource
win10v2004-20240704-en
General
-
Target
290d6e59995003c9a852822bf79fe593_JaffaCakes118
-
Size
596KB
-
MD5
290d6e59995003c9a852822bf79fe593
-
SHA1
1bd603b77a902eb2d8db1911a9f4232647fd60a8
-
SHA256
92291a057d9dd8afef99fe9eab108e3d996576a7490bf107a2e448b257092c18
-
SHA512
8a9b85618134db94374022a37717d909d0aa95a83e78067c464932af4eea8c817fa96ad89951f129c777787fe780fe00847fbd0eebfddc9e80846434fecb4006
-
SSDEEP
12288:vik+mX6kk9pvrfEnZEZr5V8nQgzhbyOEMTXRgFWO81CkLZOvHwU79FzI9Ys:viPsxCpTcZJnQ+mMTXRREBHZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PocketAlarm.v2.18.5.PPC.Incl.Keygen/Keygen.exe
Files
-
290d6e59995003c9a852822bf79fe593_JaffaCakes118.rar
-
PocketAlarm.v2.18.5.PPC.Incl.Keygen/Keygen.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
PocketAlarm.v2.18.5.PPC.Incl.Keygen/PocketAlarmMp3.cab.cab
-
000000ok.118
-
0000List.013
-
0000deu0.088
-
0000deu1.089
-
0000deu2.100
-
0000deu3.102
-
0000deu4.104
-
0000deu5.106
-
0000deu6.108
-
0000deu7.109
-
0000deu8.110
-
0000deu9.111
-
0000eng0.025
-
0000eng1.026
-
0000eng2.027
-
0000eng3.028
-
0000eng4.029
-
0000eng5.030
-
0000eng6.031
-
0000eng7.032
-
0000eng8.033
-
0000eng9.034
-
0000rus0.052
-
0000rus1.053
-
0000rus2.055
-
0000rus3.057
-
0000rus4.058
-
0000rus5.059
-
0000rus6.060
-
0000rus7.061
-
0000rus8.062
-
0000rus9.063
-
000Setup.999
-
000deu10.090
-
000deu11.091
-
000deu12.092
-
000deu13.093
-
000deu14.094
-
000deu15.095
-
000deu16.096
-
000deu17.097
-
000deu18.098
-
000deu19.099
-
000deu20.101
-
000deu30.103
-
000deu40.105
-
000deu50.107
-
000eng10.035
-
000eng11.036
-
000eng12.037
-
000eng13.038
-
000eng14.039
-
000eng15.040
-
000eng16.041
-
000eng17.042
-
000eng18.043
-
000eng19.044
-
000eng20.045
-
000eng30.046
-
000eng40.047
-
000eng50.048
-
000rus10.064
-
000rus11.065
-
000rus12.066
-
000rus13.067
-
000rus14.068
-
000rus15.069
-
000rus16.070
-
000rus17.071
-
000rus18.072
-
000rus19.073
-
000rus1a.054
-
000rus20.074
-
000rus21.075
-
000rus22.076
-
000rus23.077
-
000rus2e.056
-
000rus30.078
-
000rus40.079
-
000rus50.080
-
00attach.117
-
00deuUhr.114
-
00deuund.115
-
00fmodce.004
-
00snooze.119
-
0Buttons.012
-
0Deutsch.011
-
0English.010
-
0deuBell.112
-
0deuZeit.116
-
0engBell.049
-
0rusBell.081
-
0ruschas.082
-
BUD793~1.022
-
BUTTON~1.014
-
BUTTON~2.016
-
BUTTON~3.018
-
BUTTON~4.020
-
ENGOCL~1.024
-
HMARIK~1.000
-
LIST(S~1.019
-
LIST(S~2.021
-
LIST(S~3.023
-
LIST_L~1.015
-
LIST_S~1.017
-
PLAYTI~1.008
-
PLAYTI~2.007
-
PLAYTI~3.006
-
POCKET~1.001
-
POCKET~1.003
-
POCKET~2.002
-
RUSCHA~1.084
-
RUSMIN~1.086
-
RUSMIN~2.087
-
WHATTI~1.009
-
WhatTime.005
-
deuPunkt.113
-
engintro.050
-
ruschasa.083
-
rusminut.085
-
rusrovno.051