Behavioral task
behavioral1
Sample
KEYGEN.exe
Resource
win7-20240903-en
General
-
Target
0eea1fc3c56cebfea651764c3dddcf7c_JaffaCakes118
-
Size
87KB
-
MD5
0eea1fc3c56cebfea651764c3dddcf7c
-
SHA1
60ae7008cb2ac3c1ad8bdd029879b6e00f306b2e
-
SHA256
b92f1584f2f87eefbc8cb932e1a26e58789bf8a2e1851915d55544c96e032f7a
-
SHA512
8d8ffcb7f4f74536cfb9e0ac73e036775c1c85c624e5e751e8bb39c91aa3ffe82098ee21a23071ab0232eb287950e20242ebb2b5b2ec212b8d3ec8f085b861b1
-
SSDEEP
1536:swIFqnJbn9oKiBSxUx94tjpdKp1WdTUzBlK01mx6iwXNumU52NYYL8xUDbetKFWm:dIFoJTO2xpdKpeoDK3FKTYYnqgWm
Malware Config
Signatures
-
resource yara_rule static1/unpack001/KEYGEN.EXE upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/KEYGEN.EXE
Files
-
0eea1fc3c56cebfea651764c3dddcf7c_JaffaCakes118.rar
-
KEYGEN.EXE.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
LZ0.NFO