Behavioral task
behavioral1
Sample
PI8crack.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
PI8crack.exe
Resource
win10v2004-20241007-en
General
-
Target
26f2cf4b64b5d38c2a6373e842a4495a_JaffaCakes118
-
Size
51KB
-
MD5
26f2cf4b64b5d38c2a6373e842a4495a
-
SHA1
f27c96e1ca439bad293d6f2bc0422a7c08d8bead
-
SHA256
a1d913516121161950cd5aa61fe5cc9fabe4b92e333e043baa8a1ec7f6e9a083
-
SHA512
2582226f019f925c196cf7ed0431653227ab8ebcdce211dce3f3ed1e3078ff4f976956d9ac95f791e5c4f0dbf37c9c3641f3dd14de600d839a60f04f047a54c3
-
SSDEEP
768:twOSW3AtrG8XNtupHELq5s2MtDd2q6cXE3PJrG/5tJDEPOLTZb+Sb7:twO9AhTXSSFRd2nL+QPETES3
Malware Config
Signatures
-
resource yara_rule static1/unpack001/PI8crack.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PI8crack.exe
Files
-
26f2cf4b64b5d38c2a6373e842a4495a_JaffaCakes118.zip
-
-
PI8crack.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crk Size: 39KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.nfo