Static task
static1
Behavioral task
behavioral1
Sample
rorptp2b/keygen.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
rorptp2b/keygen.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
rorptp2b/使用说明-piaodown.com.htm
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
rorptp2b/使用说明-piaodown.com.htm
Resource
win10v2004-20240802-en
General
-
Target
135704a1adfa0c7c1303a8333405c772_JaffaCakes118
-
Size
36KB
-
MD5
135704a1adfa0c7c1303a8333405c772
-
SHA1
450b17cb41759a5644e2dc70ab49a6cbf5efba4a
-
SHA256
5c4d7c17bc2cbe9bdbd8e9c537900ef81b12e289d4d536f243794dd834245842
-
SHA512
24c9e3c5a503a1cfac0002c5bb302223e0dcb3255636047c45ee013d90bfe70a6f5913e53ddfff7099e22d89346bae45a2ad45ece21e34b8637b62814454560e
-
SSDEEP
768:lEcht2u5Xy4rV3J0bjDBddVwRmRsUHExYr7eO+oRLkHsvJmr:ldhF5Xy4rIf3AR6sUHE2r7eEkHvr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/rorptp2b/keygen.exe
Files
-
135704a1adfa0c7c1303a8333405c772_JaffaCakes118.rar
-
rorptp2b/keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
rorptp2b/ror.nfo
-
rorptp2b/使用说明-piaodown.com.htm.html
-
rorptp2b/飘Down软件.txt