Static task
static1
Behavioral task
behavioral1
Sample
Nitro.PDF.6.Keygen.by.EMBRACE.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Nitro.PDF.6.Keygen.by.EMBRACE.exe
Resource
win10v2004-20241007-en
General
-
Target
3dad2dbb9359f5006966ab0aa5c384ec_JaffaCakes118
-
Size
47KB
-
MD5
3dad2dbb9359f5006966ab0aa5c384ec
-
SHA1
c633775129d2a393c6d2d5accd08b575f671b7e3
-
SHA256
e95104ceb971124df134a4d21658cad7ee3fe4b690e12608fce78bcc320d9edb
-
SHA512
cc90e260dcacf8991a63771b2488b07629fe5af6d5373d9645ec41035615621c131ac3c979aa46268fb83aed423ea1b59b539475d1bad853d6532e30170e3319
-
SSDEEP
768:1xyK+T0+qP00Ft9G2wQA2SKIJ6Dc7NNEB2KkWvotWzZHWYB9hkowTkx7:XyVTw0OG2wQ3O6A7YBNkWvGkHWY3WTs7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Nitro.PDF.6.Keygen.by.EMBRACE.exe
Files
-
3dad2dbb9359f5006966ab0aa5c384ec_JaffaCakes118.rar
-
Nitro.PDF.6.Keygen.by.EMBRACE.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Inc Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Inc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Inc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Note.txt