Static task
static1
Behavioral task
behavioral1
Sample
keyegn.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
keyegn.exe
Resource
win10v2004-20240508-en
General
-
Target
8fde8dd68ab16187149d9aa1395dfbe0_JaffaCakes118
-
Size
46KB
-
MD5
8fde8dd68ab16187149d9aa1395dfbe0
-
SHA1
72f4bcf23800efa1ad6b1b8d41b5ea43de6c02ea
-
SHA256
9de9cc52a4b2cc3478150003478d56defd29065c8f4bec57c43c75b8833c8c24
-
SHA512
d9df5c3ca36de55924b90c30f4c1a97195b9cf4afa7e238e51f3173229ff9bdc9e3e6dee7fc7786e3eb69ab18fe3c390cbc136ad889bbe829e3bc0a287158857
-
SSDEEP
768:Y75gM3XyrmpOyeX1wjpQOHMifUnVNQNHKdoe21H57eo7cjVFajREPIlRnhaUbX:YeMHKmpOyeX1wjpQOHMiMnQ9Kd3SpA50
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/keyegn.exe
Files
-
8fde8dd68ab16187149d9aa1395dfbe0_JaffaCakes118.zip
-
REVENGE.nfo
-
file_id.diz
-
keyegn.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nfJBg86 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nfJBg86 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.nfo