Static task
static1
Behavioral task
behavioral1
Sample
Personalabrechnungs.und.Informationsprogramm.v3.0.4.German.Incl.Keygen-HS/keygen.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Personalabrechnungs.und.Informationsprogramm.v3.0.4.German.Incl.Keygen-HS/keygen.exe
Resource
win10v2004-20241007-en
General
-
Target
398afc4349070f05a5210b406dde7661_JaffaCakes118
-
Size
28KB
-
MD5
398afc4349070f05a5210b406dde7661
-
SHA1
c81e30bfb90d8e02bfdf6063bf193cb1b72f0230
-
SHA256
067eb4828d42fec4fc6265b3f0a06fd09203e1ff4711ddd1203850b892cbe450
-
SHA512
d6c2c9e8be487a0a0ced8f085faf5b34f5401fce2c3b07a4048d6b3ba571e1ba290293c9ae29d33143c2aedbd6411367e2475bbf481a95361615c5d6666f0508
-
SSDEEP
768:bu/zjXXrUXsocFu9sv+BXfVgzmRx8D2Ieqa/mJc:byPXrGYFuKWBXfQmReDHqmm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Personalabrechnungs.und.Informationsprogramm.v3.0.4.German.Incl.Keygen-HS/keygen.exe
Files
-
398afc4349070f05a5210b406dde7661_JaffaCakes118.zip
-
Personalabrechnungs.und.Informationsprogramm.v3.0.4.German.Incl.Keygen-HS/file_id.diz
-
Personalabrechnungs.und.Informationsprogramm.v3.0.4.German.Incl.Keygen-HS/hs.nfo
-
Personalabrechnungs.und.Informationsprogramm.v3.0.4.German.Incl.Keygen-HS/keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.nfo