Behavioral task
behavioral1
Sample
33b599bf638ee7b0d624cb5f04728800_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33b599bf638ee7b0d624cb5f04728800_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33b599bf638ee7b0d624cb5f04728800_JaffaCakes118
-
Size
67KB
-
MD5
33b599bf638ee7b0d624cb5f04728800
-
SHA1
b70a7ccfc0fc1b37b052efddbec61e856b181434
-
SHA256
40976c69900bb7204ec7d11bdca3d99e6053ed1a482e0bb19f2c8f493265e055
-
SHA512
42861dc147783843ae24e6a8f0d394a70d33a80ba396e413a9fbe1ea5a0627d8628923735e4d811a607c32c7b08d90583c24d0330fdbeb173d4c6a1d939ce74e
-
SSDEEP
1536:muL3OHxl41HzpU5Wf9pwc29gDURFoOrfWXUCe/TY:rORl41H1Fwc7mWu1Ce
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b599bf638ee7b0d624cb5f04728800_JaffaCakes118
Files
-
33b599bf638ee7b0d624cb5f04728800_JaffaCakes118.exe windows:4 windows x86 arch:x86
f69b74e263d8f0da8f5743068285772b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetModuleHandleA
GetProcAddress
VirtualProtect
shell32
StrStrIA
msvcrt
rand
user32
MessageBoxA
Sections
.text Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 822B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ