Static task
static1
Behavioral task
behavioral1
Sample
key_gen.exe
Resource
win7-20240903-en
General
-
Target
563351db2407e9884d90ec5c539fe54e_JaffaCakes118
-
Size
1.0MB
-
MD5
563351db2407e9884d90ec5c539fe54e
-
SHA1
e0af36dd5f50097cb2feaec0a4cb3c753b570d66
-
SHA256
e2944471c9037aeda4f19ddf17730212d280707991996b6177eea3e8ffb770ac
-
SHA512
730177d81a1a070054adaecc1d6c0009fb96e329819fe8dda9299f8ae1626b9943293fdf052beaaaba6db3076574f176aea7c50c9d53cbf8064417634e875fe0
-
SSDEEP
24576:o5y2l6368LTDGdT/qy4jKApad++OUqnWXRYL8/MEUn/tN+xpkI:oOGdMjKApFncXKL8/MEa/t4xpkI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/key_gen.exe
Files
-
563351db2407e9884d90ec5c539fe54e_JaffaCakes118.zip
-
faq.nfo
-
key_gen.exe.exe windows:5 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
dcgmumwo Size: 257KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rbsxloti Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkmdkepk Size: 754KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pxxfswfo Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE