Behavioral task
behavioral1
Sample
破解PDF防拷!/pdfcrack.exe
Resource
win7-20240708-en
General
-
Target
94cf9cef3a61e376f3a0e585ac104214_JaffaCakes118
-
Size
415KB
-
MD5
94cf9cef3a61e376f3a0e585ac104214
-
SHA1
db1e37f001b0b072e6afd748f6075d618556511e
-
SHA256
9f051f19231644572544e20367e151d08cb1a45a6675ae9f9e964e26a8b84fe5
-
SHA512
3c83b9541da9585683c3c4b910eb22bce43b5582dfd9b06aec6867ab92223905574a7e8b0103fa2b433e89b48eb8fd6c9a654761fc352af64c1ca5a7e303ea2a
-
SSDEEP
6144:V+oVRcXz7T5J6UL2NsvMnsJy8nvC4cSGfUeTR8iuY5ceZ9L4ePYk7PY9vDkVaGYl:/6HdkULDvuIy4jYvTnJCm+bkGSEjU8
Malware Config
Signatures
-
resource yara_rule static1/unpack001/破解PDF防拷!/pdfcrack.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/破解PDF防拷!/pdfcrack.exe
Files
-
94cf9cef3a61e376f3a0e585ac104214_JaffaCakes118.rar
-
破解PDF防拷!/pdfcrack.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 704KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 418KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
破解PDF防拷!/說明.txt