Behavioral task
behavioral1
Sample
Crack_CO_PRO_WIN_376_EN/keygen.exe
Resource
win7-20240708-en
General
-
Target
b58cc3ba51855005312c02e9bc7b2588_JaffaCakes118
-
Size
70KB
-
MD5
b58cc3ba51855005312c02e9bc7b2588
-
SHA1
e6667de66d46f1a92da6242b8db8786df72403e2
-
SHA256
c169af3fbb4c993cf3b8e27dc657e4b7da61f494faf21738dcf4f255b492edd8
-
SHA512
6737275d0ad6827aefcd8640905b8c8427b47bf00fed77535840e9c78e42c1c3ef8e8fe60d5aaa1fb4d2864e8b8b793445c5aa5fe6022bb5a4c09fe3b3a69f3a
-
SSDEEP
1536:zbb8qaZLgwTS1MX+rE+qy//FxLzYUF7Pi4zp2/l3:f1wvTYq+qy1yUF76//9
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Crack_CO_PRO_WIN_376_EN/keygen.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crack_CO_PRO_WIN_376_EN/keygen.exe unpack002/out.upx
Files
-
b58cc3ba51855005312c02e9bc7b2588_JaffaCakes118.rar
-
Crack_CO_PRO_WIN_376_EN/keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ