Overview
overview
3Static
static
30DAY SOFT ...ru.url
windows7-x64
10DAY SOFT ...ru.url
windows10-2004-x64
1Adobe.Phot...ru.url
windows7-x64
1Adobe.Phot...ru.url
windows10-2004-x64
1Adobe.Phot...ru.url
windows7-x64
1Adobe.Phot...ru.url
windows10-2004-x64
1Adobe.Phot...en.exe
windows7-x64
1Adobe.Phot...en.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
0DAY SOFT - www.softnewsportal.ru.url
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0DAY SOFT - www.softnewsportal.ru.url
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
Adobe.Photoshop.CS4.Keygen-X-FORCE/0DAY SOFT - www.softnewsportal.ru.url
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Adobe.Photoshop.CS4.Keygen-X-FORCE/0DAY SOFT - www.softnewsportal.ru.url
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/0DAY SOFT - www.softnewsportal.ru.url
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/0DAY SOFT - www.softnewsportal.ru.url
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/adobe-master-cs4-keygen.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/adobe-master-cs4-keygen.exe
Resource
win10v2004-20240704-en
General
-
Target
2ea89a9d507ea08087b8ebd71dd1d7db_JaffaCakes118
-
Size
46KB
-
MD5
2ea89a9d507ea08087b8ebd71dd1d7db
-
SHA1
507bd50a054eeb740886631f94fde9d144216b79
-
SHA256
5c45514c4b2a9c70a199d10024b2e2b936664713f18ab73986f38157e5a0a6cf
-
SHA512
afd409643a8a54c4ca235376800641c302e02366bd85aa5c27c906b9b793ccf87745b6e7eb5095585179974b2bccfea384f8043a368d5cc2b16d46bfecb0c61e
-
SSDEEP
768:gr/IT7DtGIfBGy+YDLP42TQbYaoQKultzhDoYCYSVTIOWrUPEhr0W5/IOtALRMqo:gr/S7DYIfBzjE2cYzQ7aVNTIOWrUPERv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/adobe-master-cs4-keygen.exe
Files
-
2ea89a9d507ea08087b8ebd71dd1d7db_JaffaCakes118.rar
-
0DAY SOFT - www.softnewsportal.ru.url
-
Adobe.Photoshop.CS4.Keygen-X-FORCE/0DAY SOFT - www.softnewsportal.ru.url
-
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/0DAY SOFT - www.softnewsportal.ru.url
-
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/adobe-master-cs4-keygen.exe.exe windows:4 windows x86 arch:x86
df93c5d683e4e2f941a1fedd56db6f58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
SetFocus
LoadIconA
SendMessageA
EndDialog
SetDlgItemTextA
DialogBoxParamA
kernel32
GetCurrentProcessId
FlushFileBuffers
ExitProcess
GetTickCount
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
HeapSize
CreateFileA
CloseHandle
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/disable_activation_osx
-
Adobe.Photoshop.CS4.Keygen-X-FORCE/CS4Keygen1/install.txt