Static task
static1
Behavioral task
behavioral1
Sample
Keygen.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Keygen.exe
Resource
win10v2004-20240508-en
General
-
Target
00807c5262d559f55009517add92e056_JaffaCakes118
-
Size
69KB
-
MD5
00807c5262d559f55009517add92e056
-
SHA1
8d66178be9a24b5d4a7c7c2edb9b11bbba8ee9c8
-
SHA256
e824c563f43ad5a6a3522148a3c38d52db81fe21e21a088771d6f0004bd41ca1
-
SHA512
89a321c4a7ccf5f1e0b8b588fc6dfe6683d4a6de52352dadff9f2cd032d4a6d738c67432c146c4a08aa6727b1ff6e6c014e7ef673aa16553e68fdc02e144ccd0
-
SSDEEP
1536:QslX048opy4Ox8fubyvFugr0c0Q5goqnrApEtaFGE8hJ/b74V12AnJYX:Qm0RoYx8fUiZioqnBagEtRw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Keygen.exe
Files
-
00807c5262d559f55009517add92e056_JaffaCakes118.rar
-
Keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BRAT0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BRAT1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BRAT2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.htm.html .js polyglot