Static task
static1
Behavioral task
behavioral1
Sample
OnOne.Mask.Pro.v4.1.1.for.Adobe.Photoshop-SCOTCH/keygen/onOne.Software.MultiKeygen.v1.0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
OnOne.Mask.Pro.v4.1.1.for.Adobe.Photoshop-SCOTCH/keygen/onOne.Software.MultiKeygen.v1.0.exe
Resource
win10v2004-20240709-en
General
-
Target
60467a3dd42b0395b3f9343e16c80dfa_JaffaCakes118
-
Size
21KB
-
MD5
60467a3dd42b0395b3f9343e16c80dfa
-
SHA1
00bb9fc0ac847f4d82eb4af2d780e7447bf600a2
-
SHA256
2e064a1a58629bef8708a01cd6f73943b180321ea7cef8e939476d75db2300d5
-
SHA512
caba8d8beaafcf7d7929487f3cacc3875f4595288f3fba72f5f9dfb3e5c140a2c1ea59c501476e3e99ded8aad31548f8e6851db7de5a83cfd75ebf92b627e317
-
SSDEEP
384:sjwY5etQgk4/pzeAVCLtspFeWwLVtU46wOrSTcVvmyFuuH76aOXs2m/D5R3O/JLm:owY8tQ8CA4LtrPX6wOruc0n0XO8P3O8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/OnOne.Mask.Pro.v4.1.1.for.Adobe.Photoshop-SCOTCH/keygen/onOne.Software.MultiKeygen.v1.0.exe
Files
-
60467a3dd42b0395b3f9343e16c80dfa_JaffaCakes118.zip
-
OnOne.Mask.Pro.v4.1.1.for.Adobe.Photoshop-SCOTCH/file_id.diz
-
OnOne.Mask.Pro.v4.1.1.for.Adobe.Photoshop-SCOTCH/keygen/onOne.Software.MultiKeygen.v1.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
OnOne.Mask.Pro.v4.1.1.for.Adobe.Photoshop-SCOTCH/scotch.nfo
-
keygen.nfo