Behavioral task
behavioral1
Sample
Pontifex_2_v1.2_crack.exe
Resource
win7-20240708-en
General
-
Target
0db776aa5678345a55814848ee807251_JaffaCakes118
-
Size
15KB
-
MD5
0db776aa5678345a55814848ee807251
-
SHA1
1d63ae1fcdd2c711382757d3150c5dae4b182032
-
SHA256
7d64eb98fde4e3237a0f758de0163a50f3b741f9ddf404f8cc61dad71e585118
-
SHA512
2668eca6b52f1bd0d9d7ca3f5971ab4aceaee5bb649e91c9f1b4d11e75ec5f33a6d6170b765b4dcc639b25b08b8cdbf63b6a98e44f4520f3b31399be7a46e44a
-
SSDEEP
384:GToZ5tmlz3ZmONvc3ubbW2IAcdwC6THgMu/G6g+GtHQ:Yuy1/Nvc3UGAcd2zgV/8w
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Pontifex_2_v1.2_crack.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Pontifex_2_v1.2_crack.exe
Files
-
0db776aa5678345a55814848ee807251_JaffaCakes118.zip
-
Pontifex_2_v1.2_crack.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
file_id.diz