Behavioral task
behavioral1
Sample
proteus65sp5crk.exe
Resource
win7-20240704-en
General
-
Target
fca9e00c7c81043ae852fe2dcafc6afa_JaffaCakes118
-
Size
15KB
-
MD5
fca9e00c7c81043ae852fe2dcafc6afa
-
SHA1
dc66ac90436c56b8acce5b82b771dd5c7bfde451
-
SHA256
96abe203471b83c3fe8b1446c08331d934692a3fc56f1677490df84ef8bf35f1
-
SHA512
e837ae5e5e7491486eca81a759071c67ba5fa5c09f8b77471d25d51701efe5ef80b90d4d2d9c9631e657bc25abd8d88c777a87156d57e1acac124e6c51c6605d
-
SSDEEP
384:Zn6SWLv7p9xWEE1aOpfR2riG7e09Efy16RfjkUI:B8LNWJ1aOp0iGa0992foz
Malware Config
Signatures
-
resource yara_rule static1/unpack001/proteus65sp5crk.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/proteus65sp5crk.exe
Files
-
fca9e00c7c81043ae852fe2dcafc6afa_JaffaCakes118.zip
-
proteus65sp5crk.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
read.me