Behavioral task
behavioral1
Sample
Crack/keygen.exe
Resource
win7-20240903-en
General
-
Target
2ee18e7ef043c5164c20dbab7ff50516_JaffaCakes118
-
Size
218KB
-
MD5
2ee18e7ef043c5164c20dbab7ff50516
-
SHA1
5539cf3b5c0528ffdcbd92c3278e17d81c05ea6f
-
SHA256
794ee4f4d39b477917b619f33423f91b3d0ec0c731e370cf41b08ecc4050e8e3
-
SHA512
a266e66962266036e619cb502a19f3d3e73aa1df281ba343550fc7d43ef4f2bc51fff3e7bc29bea2ddbad985ac1e4ec71185b5506747e2e0b459de7165e26df0
-
SSDEEP
6144:IW+ZnI55mucyRYJ36Yk0LCqtGS4mdjkzlIfDNQ8aSi:v+Z6cOYJ3nVLCqH4mdUUNQ8aSi
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Crack/keygen.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crack/keygen.exe
Files
-
2ee18e7ef043c5164c20dbab7ff50516_JaffaCakes118.rar
-
Crack/_A2C371E126174BB58C60A26D3329D6F9
-
Crack/_DB8BC6EF8D374A92B932CF826CC5DA8F
-
Crack/keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE