Static task
static1
Behavioral task
behavioral1
Sample
SolarWinds.Orion.Network.Performance.Monitor.SLX.Edition.v8.5.1.SP2.Incl.Keymaker-ZWT/Keygen.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SolarWinds.Orion.Network.Performance.Monitor.SLX.Edition.v8.5.1.SP2.Incl.Keymaker-ZWT/Keygen.exe
Resource
win10v2004-20240426-en
General
-
Target
9a06dbae85e5d1b8d424b76065b40074_JaffaCakes118
-
Size
55KB
-
MD5
9a06dbae85e5d1b8d424b76065b40074
-
SHA1
20974fdcde6095d380f580106afc2e8a7d9ca4f6
-
SHA256
d9abd0097c9b647403912c640be80798cd3d16e55fa2183ec11c31cb1442c8f9
-
SHA512
f5f3d95722439ecd5f687813647145085432f7174f483fcfb65bbb16be4936846ea29e99eab91adbb393042437840b8c5d8f7f8199438e455a601adffa2d3e0b
-
SSDEEP
768:M7hBEWo9AGlBBFtNr5N95p0ZieSvlYH57bgrEpJsHtPSHZZPCu6ZM4A5NJ:Ch6/3PfBeha+YS5VeOxT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SolarWinds.Orion.Network.Performance.Monitor.SLX.Edition.v8.5.1.SP2.Incl.Keymaker-ZWT/Keygen.exe
Files
-
9a06dbae85e5d1b8d424b76065b40074_JaffaCakes118.zip
-
SolarWinds.Orion.Network.Performance.Monitor.SLX.Edition.v8.5.1.SP2.Incl.Keymaker-ZWT/Keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SolarWinds.Orion.Network.Performance.Monitor.SLX.Edition.v8.5.1.SP2.Incl.Keymaker-ZWT/file_id.diz
-
SolarWinds.Orion.Network.Performance.Monitor.SLX.Edition.v8.5.1.SP2.Incl.Keymaker-ZWT/zwt.nfo
-
keygen.nfo