Overview
overview
8Static
static
3Activation...LG.exe
windows7-x64
3Activation...LG.exe
windows10-2004-x64
3Activation...en.exe
windows7-x64
8Activation...en.exe
windows10-2004-x64
8Activation...on.cmd
windows7-x64
8Activation...on.cmd
windows10-2004-x64
8Activation...��.exe
windows7-x64
3Activation...��.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Activation/CS4MCLG.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Activation/CS4MCLG.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Activation/adobe-master-cs4-keygen.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Activation/adobe-master-cs4-keygen.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Activation/disable_activation.cmd
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Activation/disable_activation.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Activation/ .exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Activation/ .exe
Resource
win10v2004-20240802-en
General
-
Target
0355aa27cf425f5074fa551d8f6b949f_JaffaCakes118
-
Size
363KB
-
MD5
0355aa27cf425f5074fa551d8f6b949f
-
SHA1
71314f0a2af8601bf6f07338e5a060d8eb82d35a
-
SHA256
f6f89b2042b561116f260d264d3be677b1fb5fa2fd0bb72e658e5eac0e75dee0
-
SHA512
ffaa3776ebdb06b8553bace1551f7c4b5d48f0004e92d7d052f08abf9ae3ba36b62331d17aa227975f93cd53d5164d2d2c243b72032ba4cd47b5e1f2c57eedf3
-
SSDEEP
6144:RRYrybWkVwH7Dc8P1EN5TXPK7ZN+TldokPDPXmm/Xj306EC1mRBN4llZ5leI:RRYrybWkqHb+VXCzkztj30kcrN4vll
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Activation/CS4MCLG.EXE unpack001/Activation/adobe-master-cs4-keygen.exe unpack001/Activation/ .exe
Files
-
0355aa27cf425f5074fa551d8f6b949f_JaffaCakes118.zip
-
Activation/CS4MCLG.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 1.2MB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
-
Activation/adobe-master-cs4-keygen.exe.exe windows:4 windows x86 arch:x86
5125e9eeced3c783f804d7eaef7ab689
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord1979
ord922
ord3318
ord354
ord5186
ord665
ord6385
ord5773
ord5442
ord1200
ord860
ord2846
ord2919
ord5572
ord800
ord540
msvcrt
_initterm
__set_app_type
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__p__fmode
exit
_XcptFilter
_exit
atol
_splitpath
_access
_tempnam
free
__CxxFrameHandler
__getmainargs
_acmdln
__setusermatherr
_stricmp
kernel32
GetTempPathA
GetSystemDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
Sleep
DeleteFileA
GetStartupInfoA
GetModuleHandleA
user32
GetDesktopWindow
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Activation/disable_activation.cmd
-
Activation/disable_activation_osx
-
Activation/ .exe.exe windows:4 windows x86 arch:x86
5125e9eeced3c783f804d7eaef7ab689
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord1979
ord922
ord3318
ord354
ord5186
ord665
ord6385
ord5773
ord5442
ord1200
ord860
ord2846
ord2919
ord5572
ord800
ord540
msvcrt
_initterm
__set_app_type
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__p__fmode
exit
_XcptFilter
_exit
atol
_splitpath
_access
_tempnam
free
__CxxFrameHandler
__getmainargs
_acmdln
__setusermatherr
_stricmp
kernel32
GetTempPathA
GetSystemDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
Sleep
DeleteFileA
GetStartupInfoA
GetModuleHandleA
user32
GetDesktopWindow
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ