Static task
static1
Behavioral task
behavioral1
Sample
Crack.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Crack.exe
Resource
win10v2004-20240709-en
General
-
Target
689db0df50d75dc51e4c0b1842453def_JaffaCakes118
-
Size
73KB
-
MD5
689db0df50d75dc51e4c0b1842453def
-
SHA1
e6670c07f9d2c7b510cea17245c7bc556c31f59c
-
SHA256
1bd81abecb8749fb1c2b909c634fdcf978a75118368b76cd2c8a704a4374079e
-
SHA512
37a23508ec0b4c7f97f31266ce9aad6bb22b6b012ee0ec35e4a8a5b5162b11e364ac8bfc05288e1c4e7b4e8f5dd191af6f554e9ec46e49dd07bb87706ac7e326
-
SSDEEP
1536:Rr4/AeWR5J3c9i/Nehh9cdrv1Kw4d523RkZAvghmW80EidmQbhopmrY5Obg3hE:Rk4N5JM9E+kdrv1n4d5IuhmW9HrRUE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crack.exe
Files
-
689db0df50d75dc51e4c0b1842453def_JaffaCakes118.zip
-
Crack.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Reliz by Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. TSRh . Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. TeaM . Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
file_id.diz
-
tsrh.nfo