Behavioral task
behavioral1
Sample
e92102456f8f5f07bcd03712b09fd0dd_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e92102456f8f5f07bcd03712b09fd0dd_JaffaCakes118
-
Size
496KB
-
MD5
e92102456f8f5f07bcd03712b09fd0dd
-
SHA1
fcadd9925a226bc0ace92195275f06eef28cf322
-
SHA256
1ca711c55045efac2a5259b1c3f22df939f6cc18dd14fcf1c1cf28cbb8bab75b
-
SHA512
d4dcc803972917b988bc4f1967b7af0a5473c0a787330a88ad837406807fc0f911a4562c9e47ce68a1a7671a531995293056b7b848b21be332a3b353031f4d3a
-
SSDEEP
12288:Af4zdi3VemHZziQaGTf8B6/sdrsM66fyl:cVRlf8B68rHy
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e92102456f8f5f07bcd03712b09fd0dd_JaffaCakes118
Files
-
e92102456f8f5f07bcd03712b09fd0dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ