Static task
static1
Behavioral task
behavioral1
Sample
Advanced.RAR.Password.Recovery.v1.52.48.6.WinAll.Cracked-ARN/crack/arpr.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Advanced.RAR.Password.Recovery.v1.52.48.6.WinAll.Cracked-ARN/crack/arpr.exe
Resource
win10v2004-20240802-en
General
-
Target
06e5e7e2442acf8487bec766d0d20e3e_JaffaCakes118
-
Size
278KB
-
MD5
06e5e7e2442acf8487bec766d0d20e3e
-
SHA1
4f07bd9ef24aee30e2fdd88b7b35e3940ab82db2
-
SHA256
f14531771b6a01fac18f09a21b37e2e6e169f80e87899176f99e5d49318ea2cd
-
SHA512
be76deea8dfe1d0ba1f06a8404d0d220f21aa237cf80bb3d45bd3b9badd34d83083289aa88c31f40b172121f74da96316cb9c67a8278191f043cef4e4a48af93
-
SSDEEP
6144:qRIDWUTW+qjTAGGAeKUBa4PAJhkn3ukV1JhExKdl99kL/RH6:q+cToAeKYTAw3rPjExWl9WL8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Advanced.RAR.Password.Recovery.v1.52.48.6.WinAll.Cracked-ARN/crack/arpr.exe
Files
-
06e5e7e2442acf8487bec766d0d20e3e_JaffaCakes118.zip
-
Advanced.RAR.Password.Recovery.v1.52.48.6.WinAll.Cracked-ARN/arn.nfo
-
Advanced.RAR.Password.Recovery.v1.52.48.6.WinAll.Cracked-ARN/crack/arpr.exe.exe windows:1 windows x86 arch:x86
7970c3b4ac666faf8586009e519eabdc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
SetFileSecurityA
SetFileSecurityW
comctl32
ord17
ord16
user32
wsprintfA
AppendMenuA
BeginPaint
CharLowerA
CharToOemA
CharToOemBuffA
CharUpperA
CheckDlgButton
CloseClipboard
CopyRect
CreateDialogIndirectParamA
CreatePopupMenu
CreateWindowExA
DefDlgProcA
DefWindowProcA
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawEdge
DrawFrameControl
DrawIconEx
DrawStateA
DrawTextA
EmptyClipboard
EnableWindow
EndDialog
EndPaint
FillRect
GetActiveWindow
GetClassLongA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetFocus
GetForegroundWindow
GetMenu
GetMessageA
GetMessageTime
GetParent
GetSysColor
GetSystemMetrics
GetWindowDC
GetWindowLongA
GetWindowRect
GetWindowTextA
InflateRect
InvalidateRect
IsDlgButtonChecked
IsRectEmpty
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MessageBoxA
OemToCharA
OemToCharBuffA
OffsetRect
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClassExA
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetCapture
SetClassLongA
SetClipboardData
SetDlgItemInt
SetDlgItemTextA
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
UpdateWindow
WindowFromDC
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
Shell_NotifyIconA
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBitmap
CreateFontIndirectA
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
LineTo
MoveToEx
SelectClipRgn
SelectObject
SetBkMode
SetPixel
SetTextColor
StretchBlt
TextOutA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
CloseHandle
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DeviceIoControl
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemDefaultLangID
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetTempFileNameA
GetTempPathA
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetVersionExA
GetVersion
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
InitializeCriticalSection
IsBadReadPtr
IsDBCSLeadByte
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MoveFileA
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
RemoveDirectoryA
ResumeThread
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetPriorityClass
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcpyA
lstrlenA
lstrlenW
comdlg32
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Advanced.RAR.Password.Recovery.v1.52.48.6.WinAll.Cracked-ARN/file_id.diz