Static task
static1
Behavioral task
behavioral1
Sample
Vag-Com 504 ALL VERSION Crack.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Vag-Com 504 ALL VERSION Crack.exe
Resource
win10v2004-20240709-en
General
-
Target
3b031881fe0976fedadf3ae58767830c_JaffaCakes118
-
Size
32KB
-
MD5
3b031881fe0976fedadf3ae58767830c
-
SHA1
c500705a3f73d27f2a5b5244b1ee6e5cd890c92f
-
SHA256
c315d1ba2541e60ce0c753c9da3b1c867e2caa4cea37344e63d6bde64b997c12
-
SHA512
cb4dafe2bb7a4f03f0dbea46443432cb4e35806e1d6e4fb92b7f790e104fa60a5eee4527f5b2ec4ccb38a35a5584f0bfd62d17e81897db1c61dcb04f0ce65975
-
SSDEEP
768:MF+z6DZ9fP5nYS6aj2cYvB/eAjHhM+wGfdb8X3LyI69MXxl8u:y+ujPi/aPsJBM3Gf+mI69MhlP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Vag-Com 504 ALL VERSION Crack.exe
Files
-
3b031881fe0976fedadf3ae58767830c_JaffaCakes118.rar
-
Vag-Com 504 ALL VERSION Crack.exe.exe windows:4 windows x86 arch:x86
4c47d6cb7d055efc377feec933793330
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetDriveTypeA
FindClose
GetPrivateProfileStringA
GetModuleFileNameA
GetShortPathNameA
GetVersionExA
MoveFileExA
WritePrivateProfileStringA
GetTempPathA
GetFullPathNameA
SetFileTime
GetWindowsDirectoryA
GlobalHandle
lstrcatA
LocalAlloc
WinExec
GetDiskFreeSpaceA
FindFirstFileA
GlobalAlloc
WriteFile
GlobalUnlock
GlobalFree
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetLastError
MoveFileA
CloseHandle
DeleteFileA
RaiseException
LocalFree
SetFileAttributesA
SetFilePointer
GetCurrentDirectoryA
SetEnvironmentVariableA
SetCurrentDirectoryA
HeapFree
HeapAlloc
CreateDirectoryA
HeapSize
RtlUnwind
HeapCompact
ReadFile
IsBadReadPtr
CreateFileA
GetStringTypeA
LoadLibraryA
GlobalLock
GetFileAttributesA
GetStringTypeW
IsBadCodePtr
GetProcAddress
user32
DestroyWindow
SetWindowPos
SendMessageA
GetSysColor
GetWindow
GetDlgItem
ScreenToClient
GetWindowRect
BeginPaint
EndPaint
FillRect
ReleaseDC
GetClientRect
SetWindowLongA
GetDC
SetDlgItemTextA
wsprintfA
SetWindowTextA
GetSystemMetrics
GetParent
PostMessageA
GetDlgItemTextA
OemToCharA
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
GetLastActivePopup
BringWindowToTop
AdjustWindowRectEx
UpdateWindow
IsIconic
RedrawWindow
PostQuitMessage
DefWindowProcA
ShowWindow
KillTimer
SetTimer
SetFocus
DialogBoxIndirectParamA
EndDialog
EnableWindow
MessageBoxA
CreateDialogIndirectParamA
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterWindowMessageA
gdi32
CreateFontIndirectA
GetSystemPaletteEntries
CreateSolidBrush
DeleteObject
GetStockObject
ExtTextOutA
SetBkColor
GetObjectA
GetDeviceCaps
StretchDIBits
CreatePalette
SelectPalette
IntersectClipRect
RealizePalette
SetTextColor
SetBkMode
TextOutA
SelectObject
DeleteDC
CreateDIBPatternBrush
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
comdlg32
GetSaveFileNameA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerFindFileA
comctl32
ord17
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ