Static task
static1
Behavioral task
behavioral1
Sample
Keygen.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Keygen.exe
Resource
win10v2004-20240709-en
General
-
Target
6040e53df8f931c601b22c5ab65bda25_JaffaCakes118
-
Size
110KB
-
MD5
6040e53df8f931c601b22c5ab65bda25
-
SHA1
820ce0c288b48bc2c718135669427b15c0e0da66
-
SHA256
1a69dcecb187757685bd876cb697f4167e04c8aa1fd6701d418053ab65fccbc7
-
SHA512
f83594bdb879629b5acd4f3434442b260c731f38508e1980c94125946edaad379cf64ba4d68b3ba11acbe773eba514407f8595a0e20038897ffe59a1240e3621
-
SSDEEP
3072:QU4x5elHCvM8rjPueb9LA7Wuqcn9US0OK:05wivMQuKlA3qcaKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Keygen.exe
Files
-
6040e53df8f931c601b22c5ab65bda25_JaffaCakes118.rar
-
Keygen.exe.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
ECLiPSE Size: 63KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECLiPSE Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECLiPSE Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECLiPSE Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE