Static task
static1
Behavioral task
behavioral1
Sample
AeePro.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
AeePro.exe
Resource
win10v2004-20241007-en
General
-
Target
3bfc4fea7137ec4d1007bb2a6dcedf5a_JaffaCakes118
-
Size
390KB
-
MD5
3bfc4fea7137ec4d1007bb2a6dcedf5a
-
SHA1
63d8dcfbbc76e45a4fd5b44c528fed25bbc921ce
-
SHA256
6cca82fefe5ba172e7d2d61973c7be0f47f4f121c44120fcd26a6fef5156f8fa
-
SHA512
6ad305ba8578d42e9d91d346e50d7568b6a70064446cc4f082ed2f6467136c73e56069605ce52cffc8a3cf4d9eaf1aa47a44d8780294a9e9d736ac0c1144fbda
-
SSDEEP
6144:InCF/ZPl3gMVOI/uIEQdKoy1XuHpjSgyg4qzlu2B0OcgR5fVsX/mSzd4elWq0ZGq:InCdwLsuIEQdMhuHttlgw+e7A10Qq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/AeePro.exe
Files
-
3bfc4fea7137ec4d1007bb2a6dcedf5a_JaffaCakes118.zip
-
Crack.rar.rar
-
AeePro.exe.exe windows:4 windows x86 arch:x86
ce41ec9f91b07ce238f8f8397e0bd756
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
comctl32
ImageList_Create
ord17
PropertySheetA
ord6
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_Destroy
gdi32
GetDeviceCaps
PatBlt
CreatePen
Polyline
GetObjectA
BitBlt
SetBkMode
SetTextColor
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
SelectObject
GetPixel
DeleteDC
SetPixel
kernel32
InterlockedDecrement
ExitProcess
GetLocaleInfoA
GetFileSize
GetTimeZoneInformation
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetSystemDirectoryA
GetSystemInfo
GlobalMemoryStatus
GetVersionExA
VirtualQuery
GetProcessHeap
GetSystemDefaultLCID
GetUserDefaultLCID
GetSystemTime
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GlobalFree
LocalFree
FlushFileBuffers
SetStdHandle
GetCurrentThread
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCommandLineA
GetStartupInfoA
HeapReAlloc
InterlockedIncrement
HeapAlloc
HeapFree
RtlUnwind
SetThreadPriority
OutputDebugStringA
GetTickCount
GetVersion
FindFirstFileA
FindNextFileA
FindClose
GetCurrentDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
GetLastError
DeleteFileA
MoveFileA
ReadFile
GetLocalTime
CreateFileA
SetFilePointer
WriteFile
CloseHandle
GetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
RaiseException
InitializeCriticalSection
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
oleaut32
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysFreeString
SysAllocString
VariantInit
VariantClear
VariantChangeType
SetErrorInfo
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
user32
MoveWindow
InvalidateRect
DestroyCursor
CreateWindowExA
UpdateWindow
LoadAcceleratorsA
CloseClipboard
TranslateAcceleratorA
SetClassLongA
DispatchMessageA
RegisterClassA
DefWindowProcA
BeginPaint
SetClipboardData
GetFocus
EmptyClipboard
OpenClipboard
GetMessageA
MessageBoxA
LoadStringA
SendMessageA
FindWindowA
GetSysColor
wsprintfA
WinHelpA
LoadImageA
PostMessageA
SetWindowLongA
ReleaseCapture
WaitMessage
PeekMessageA
GetCursorPos
SetCapture
ClipCursor
TranslateMessage
GetSysColorBrush
EndPaint
SetFocus
KillTimer
PostQuitMessage
SetMenu
SetTimer
GetMenu
ReleaseDC
GetDC
GetDesktopWindow
GetMenuItemInfoA
DestroyMenu
SetWindowTextA
GetSubMenu
LoadMenuA
SetMenuItemInfoA
GetMenuItemCount
SystemParametersInfoA
DrawTextA
GetSystemMetrics
FillRect
DrawEdge
GetClientRect
GetWindowRect
GetDlgItem
DeleteMenu
EnableMenuItem
SetForegroundWindow
TrackPopupMenu
GetWindowTextA
SetCursor
LoadCursorA
LoadIconA
DialogBoxParamA
GetDlgItemInt
EnableWindow
IsIconic
EndDialog
ShowWindow
SetDlgItemTextA
SetDlgItemInt
CreateDialogParamA
DestroyWindow
ClientToScreen
ScreenToClient
GetDlgItemTextA
GetParent
SetWindowPos
CheckRadioButton
SendDlgItemMessageA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
PlaySoundA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ole32
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CreateBindCtx
Sections
.text Size: 255KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 822KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
file_id.diz
-
keygen.nfo
-
virility.nfo