Static task
static1
Behavioral task
behavioral1
Sample
Intel.Integrated.Performance.Primitives.v5.3.043.LINUX.ITANIUM-Lz0/crack/licgen.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Intel.Integrated.Performance.Primitives.v5.3.043.LINUX.ITANIUM-Lz0/crack/licgen.exe
Resource
win10v2004-20240802-en
General
-
Target
eb31fb4e9e5842d2d2af0f6f57ed5dcc_JaffaCakes118
-
Size
268KB
-
MD5
eb31fb4e9e5842d2d2af0f6f57ed5dcc
-
SHA1
aa3161fc604d46a512266edddc00efc08d6fc382
-
SHA256
9d949cde0d548d81c4cd26578be884a6d0a5aa503933eabfe14fd46f29b9588d
-
SHA512
51c4ce6f7b73d882bc4e1753280a08e82f5e23b793b28567e5b52b912134839a5843eecb0467176b1001fdef3bec7df326ca442d6ed350397a170fc8b1772965
-
SSDEEP
6144:jR68/VJfp+d980LaB5pbpRzsLB/UH1cc5mcliZI:1BvAaB5vRzsB/M1vmnI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Intel.Integrated.Performance.Primitives.v5.3.043.LINUX.ITANIUM-Lz0/crack/licgen.exe
Files
-
eb31fb4e9e5842d2d2af0f6f57ed5dcc_JaffaCakes118.zip
-
Intel.Integrated.Performance.Primitives.v5.3.043.LINUX.ITANIUM-Lz0/crack/licgen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Intel.Integrated.Performance.Primitives.v5.3.043.LINUX.ITANIUM-Lz0/file_id.diz
-
Intel.Integrated.Performance.Primitives.v5.3.043.LINUX.ITANIUM-Lz0/lz0.nfo
-
keygen.nfo