Static task
static1
Behavioral task
behavioral1
Sample
Arial.Sound.Recorder.v1.5.5.Incl.Keymaker-ARN/Keymaker/keymaker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Arial.Sound.Recorder.v1.5.5.Incl.Keymaker-ARN/Keymaker/keymaker.exe
Resource
win10v2004-20240508-en
General
-
Target
7b719b5c54b365132ce14e8ef7d2e951_JaffaCakes118
-
Size
227KB
-
MD5
7b719b5c54b365132ce14e8ef7d2e951
-
SHA1
729d6cfb263f86fd1eaffc9f2962630bb36e092e
-
SHA256
5f194c8fa176034f354f093fad6b1017cfb80e92850b7d8aa85b2a7415be0136
-
SHA512
0d6157d2b8aabe2def309294cd800896ee3980e932bd26763165771086fe9b988bacd770deb4b0443b28c54bcb515a952a98e8576d2557012a0ca8e0fab62923
-
SSDEEP
6144:9VaxyowhbRLuIji+Dn0cmZrhwiyJYWRDtA9XZfW:PabwhVPjtjrCOiXWRDC9XNW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Arial.Sound.Recorder.v1.5.5.Incl.Keymaker-ARN/Keymaker/keymaker.exe
Files
-
7b719b5c54b365132ce14e8ef7d2e951_JaffaCakes118.zip
-
Arial.Sound.Recorder.v1.5.5.Incl.Keymaker-ARN/Keymaker/keymaker.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ARN Size: - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ARN Size: 224KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Arial.Sound.Recorder.v1.5.5.Incl.Keymaker-ARN/arn.nfo
-
Arial.Sound.Recorder.v1.5.5.Incl.Keymaker-ARN/file_id.diz
-
keygen.nfo