Static task
static1
Behavioral task
behavioral1
Sample
Contact.Manager.v1.0.4.6.Incl.Keygen-DVT/DVT/Keygen.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Contact.Manager.v1.0.4.6.Incl.Keygen-DVT/DVT/Keygen.exe
Resource
win10v2004-20241007-en
General
-
Target
30e19a47bacb9400349e9074fb256b10_JaffaCakes118
-
Size
248KB
-
MD5
30e19a47bacb9400349e9074fb256b10
-
SHA1
0f19fef05378727fee454ad92500d14077cd0aa8
-
SHA256
4b6d6d99347f34639a1979bc1d2c2dc6ef00b57ff1cc5aca30473eb1d10f2b2a
-
SHA512
8015709c139a4e1cd59e9f7d2e4cf13eabda64a7d19ea528d59dbb65f31e7eb64b10f1d507a81d9648cf7fb576567836e0f98eb100b03f539afce999c523ea47
-
SSDEEP
6144:wX5+7N/zqzSFfMr+k1WlZ3Czz8iwzF7UX:w65MrulZKz8iwlUX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Contact.Manager.v1.0.4.6.Incl.Keygen-DVT/DVT/Keygen.exe
Files
-
30e19a47bacb9400349e9074fb256b10_JaffaCakes118.zip
-
Contact.Manager.v1.0.4.6.Incl.Keygen-DVT/DVT/Keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Contact.Manager.v1.0.4.6.Incl.Keygen-DVT/dvt.nfo
-
Contact.Manager.v1.0.4.6.Incl.Keygen-DVT/file_id.diz
-
read_me.txt