Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20240426-en
General
-
Target
64c8bfd1972818560137e44c06d2d0d7_JaffaCakes118
-
Size
51KB
-
MD5
64c8bfd1972818560137e44c06d2d0d7
-
SHA1
6985887becc561a3eb0770d8972c7bc10d89998d
-
SHA256
c5587475d434444f56c7fbb6ee17a58e0e07142b8462667b1720b9b3c528491e
-
SHA512
63042e6c25a370d4d40b9d2cf4c9cf073de941b6dd6c0e63f9b82180bdeb4608c0c2228181967246ce83c0d1baa026f809729d4ee7e0e1a467c180bc1587ea9e
-
SSDEEP
768:WCEGDP699VnWv4CkD2feUEqJx3UkMPUXVEf3ld+H/zJSS/UL8/mUFlTFJKO4I:W6P6/IvRfeXqJakQmYldw7JolU/KhI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/keygen.exe
Files
-
64c8bfd1972818560137e44c06d2d0d7_JaffaCakes118.zip
-
REVENGE.nfo
-
file_id.diz
-
keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nfJBg86 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nfJBg86 Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.nfo