Static task
static1
Behavioral task
behavioral1
Sample
Email.Security.2.93.Keygen.by.AT4RE/Email Security 2.93/Keygen.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Email.Security.2.93.Keygen.by.AT4RE/Email Security 2.93/Keygen.exe
Resource
win10v2004-20240508-en
General
-
Target
79a83257d7c15f1fe36ff2bfc5a71a87_JaffaCakes118
-
Size
107KB
-
MD5
79a83257d7c15f1fe36ff2bfc5a71a87
-
SHA1
862919a276c5f6f2d20504b2e795f14b09d45e61
-
SHA256
9c246f9142ffb9c91dc7ac0ecd94d83673847a6c19332ffcbec3daff38d8e4c3
-
SHA512
eeb939f48d064bafb40024bd629a4b7dccedf5e1ff24e2bd621bbddfc9573c557672e71dc7a4e1110b55f8a2f18bc55eebd113931a51dbf5f5c6a0223b9f11eb
-
SSDEEP
3072:ZOkS5lmQwRxZbqgeBPCJdOwif782UQfcqcoG3HB:fS5lgtqgeBqJdOwiA2Z0q10HB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Email.Security.2.93.Keygen.by.AT4RE/Email Security 2.93/Keygen.exe
Files
-
79a83257d7c15f1fe36ff2bfc5a71a87_JaffaCakes118.zip
-
Email.Security.2.93.Keygen.by.AT4RE/Email Security 2.93/AT4RE.nfo
-
Email.Security.2.93.Keygen.by.AT4RE/Email Security 2.93/Keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.nfo