Static task
static1
Behavioral task
behavioral1
Sample
Alparysoft.Deinterlace.Plug-In.for.VirtualDub.v1.1.253.050105.WinALL.Incl.Keygen-BLiZZARD/keygen.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Alparysoft.Deinterlace.Plug-In.for.VirtualDub.v1.1.253.050105.WinALL.Incl.Keygen-BLiZZARD/keygen.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
readme.html
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
readme.html
Resource
win10v2004-20240802-en
General
-
Target
94b1a9ed27739dd3ea503d7d4c4bf783_JaffaCakes118
-
Size
21KB
-
MD5
94b1a9ed27739dd3ea503d7d4c4bf783
-
SHA1
18c092c7c1ecbcb95b03003d11aa66ab1cd84715
-
SHA256
4957dc0cdf9217daf2e40d025ac5ef23055fa0bd18b7b37de56c1274e708c958
-
SHA512
c60e866997a83a68baa53c52deeed4928ca34710c03fbefd98cf2769838bdea3ced02eafda305f4a9b36c851911e974862667fe4fefc67d616a7eb3537127fb9
-
SSDEEP
384:RnEFYj5QHnWGLoqmwcwHvDW0v4sz3456vdnAFejJYYyJ8W7NH1Q81riyM40dl:RnEujeHvsqmwckLk5qrJYt26NH1Xuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Alparysoft.Deinterlace.Plug-In.for.VirtualDub.v1.1.253.050105.WinALL.Incl.Keygen-BLiZZARD/keygen.exe
Files
-
94b1a9ed27739dd3ea503d7d4c4bf783_JaffaCakes118.zip
-
Alparysoft.Deinterlace.Plug-In.for.VirtualDub.v1.1.253.050105.WinALL.Incl.Keygen-BLiZZARD/blizz.nfo
-
Alparysoft.Deinterlace.Plug-In.for.VirtualDub.v1.1.253.050105.WinALL.Incl.Keygen-BLiZZARD/file_id.diz
-
Alparysoft.Deinterlace.Plug-In.for.VirtualDub.v1.1.253.050105.WinALL.Incl.Keygen-BLiZZARD/keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
readme.html.html