Behavioral task
behavioral1
Sample
04008e6d9ec897fb8398eb41090db14c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04008e6d9ec897fb8398eb41090db14c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04008e6d9ec897fb8398eb41090db14c_JaffaCakes118
-
Size
138KB
-
MD5
04008e6d9ec897fb8398eb41090db14c
-
SHA1
5a125380a2583b48d22a428f713b90e35df838a7
-
SHA256
98e35740d712c505c97685f305129f349fc52045002ce24086a2fc316c6fe54a
-
SHA512
051425bbd7c248c1665b4ce3892bff17ebfcae1bb37d4ea4542f09f4512bf9a65d5468eaf0e3f78b65895af259fde6409fe6a4e59c89effd19f4172334a56789
-
SSDEEP
3072:WGIJwQMq+oi0PcUOuGjcYb2GYn1fTMPUiOEmw4:WGIZMh6P1GjGn1fTWU1EM
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04008e6d9ec897fb8398eb41090db14c_JaffaCakes118
Files
-
04008e6d9ec897fb8398eb41090db14c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 401KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 556KB - Virtual size: 555KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE