Behavioral task
behavioral1
Sample
Adobe CS4- Keymaker v1.02.exe
Resource
win7-20240708-en
General
-
Target
1027aab30411b2b32c61be3392928fa9_JaffaCakes118
-
Size
90KB
-
MD5
1027aab30411b2b32c61be3392928fa9
-
SHA1
38721e953d43fdf77f58b463da32ac377f19fa77
-
SHA256
ba406a30cbd9cb7e7e31bd91bf6615d561441bb5fc147eb3ed7a791a93e20f68
-
SHA512
b51a4d8fb1038140e84a5d3b5273286450dd19e0ed6e470e4bc7d4c1fd2ec31d6843214d128ddee74179bbffbc5bbfae14cc584fc3813f0d9af5efad87c542b4
-
SSDEEP
1536:8PPvLn0FTe1G/1SIZA6SgpI9SSQzIm8J4ioN9//gHebByT4DxgzebVfAwx:wnMTeU1hi6SIIV2K4ioIHebByT4Fg6bX
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Adobe CS4- Keymaker v1.02.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Adobe CS4- Keymaker v1.02.exe
Files
-
1027aab30411b2b32c61be3392928fa9_JaffaCakes118.rar
-
Adobe CS4- Keymaker v1.02.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Themida Size: 512B - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 89KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Readme.txt