Static task
static1
Behavioral task
behavioral1
Sample
KEIL4.23_Lic.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
KEIL4.23_Lic.exe
Resource
win10v2004-20240802-en
General
-
Target
be690de84226a008fa5e2bb0dbc16a44_JaffaCakes118
-
Size
16KB
-
MD5
be690de84226a008fa5e2bb0dbc16a44
-
SHA1
aa68ba043a2fdb0666a4433e063fa46eb1c42d45
-
SHA256
966f629a5cd8fb12f75ab2d32aa7ec873d2986cf402ce7a44c7f8493a681123f
-
SHA512
6e0345d0e77a8dd7691362095e8b68f5b5a9c1af8e1e0ce9c4d62f5d961b118a7a227606151d103bff985816f9fdfd66afb0f91ac92c8eb30839416fb37a12d6
-
SSDEEP
384:YGxGeRafqitRnK3jIUW+rfVmpYmDqVWiERO:YzvRKzh9fVN4pBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/KEIL4.23_Lic.exe
Files
-
be690de84226a008fa5e2bb0dbc16a44_JaffaCakes118.rar
-
KEIL4.23_Lic.exe.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 13KB - Virtual size: 579KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE