Static task
static1
Behavioral task
behavioral1
Sample
OmniFormat.v8.3.Incl.Keymaker-CORE/keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
OmniFormat.v8.3.Incl.Keymaker-CORE/keygen.exe
Resource
win10v2004-20240426-en
General
-
Target
6da5fa265423e1c0b9e8de52305a0020_JaffaCakes118
-
Size
7KB
-
MD5
6da5fa265423e1c0b9e8de52305a0020
-
SHA1
b93e6866e86ad1e324af909313e0ba4ab406d250
-
SHA256
a1fc3610206e8eab1c3333333c85e1c95f20e6d3c24dc9856a1e20af554cdcc7
-
SHA512
729038a9381c26c3fa02e19ade97455352dd89b954d280e1893eac5fcfd573249e0710e2fdb6b7c96e0d667c0e6eed873b8cefacc7e8bd905032f2728f6e636e
-
SSDEEP
192:b7b5LdGkZgQxG/vy69N4aePeH/u/+hCaBg:XNZPx8D4atHG/ei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/OmniFormat.v8.3.Incl.Keymaker-CORE/keygen.exe
Files
-
6da5fa265423e1c0b9e8de52305a0020_JaffaCakes118.zip
-
OmniFormat.v8.3.Incl.Keymaker-CORE/core.nfo
-
OmniFormat.v8.3.Incl.Keymaker-CORE/file_id.diz
-
OmniFormat.v8.3.Incl.Keymaker-CORE/keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.nfo