Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20240802-en
General
-
Target
e0759ddbc69b38f616957256f6ea69a6_JaffaCakes118
-
Size
292KB
-
MD5
e0759ddbc69b38f616957256f6ea69a6
-
SHA1
197052790d37fd8495a79acf94b3be4c791286d2
-
SHA256
b277c1671851ebce21f6f4df56f441301f36f9ecbdc0986b77d92542b8755076
-
SHA512
5447492c6fd50c91742b474ef90dbcb2a455e02b3741f025fcc37043161324c5072764936aa532d71d11c16c81f4304f4261c395073c7bf3c477cb3f0951a463
-
SSDEEP
6144:LoCl3gpy5wrS0DQQ6UrNn69GjeOKkpUpK:0gwpy56Nn6aeJk7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/keygen.exe
Files
-
e0759ddbc69b38f616957256f6ea69a6_JaffaCakes118.rar
-
core.nfo
-
keygen.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ