Behavioral task
behavioral1
Sample
45edff0c1f335c97d181d183a4dce9ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45edff0c1f335c97d181d183a4dce9ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45edff0c1f335c97d181d183a4dce9ef_JaffaCakes118
-
Size
83KB
-
MD5
45edff0c1f335c97d181d183a4dce9ef
-
SHA1
4f4d58fb505cabccf071e8824ffa2a2c58e2b65d
-
SHA256
0258e8ae0c785e9bc98241e91ad91e9d6b23f19d460b97989a10557ef78a0a1b
-
SHA512
18cd64de1092c3176f6cbaebb735ce358acdb5805e28894e3d5af4cf1d3002dbe640d7aff52366598c890c140c35a210645d0fdb7696c9291f5860266f7c5ad7
-
SSDEEP
1536:OU5b4MWoPw5Yk3K3CQWDrl4MkNohv1nxfLCzdOJxgJ1OdsKQcgRqOghE:OU5b4v593K3CQkr9hvZxGzcfgbOdsD/m
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45edff0c1f335c97d181d183a4dce9ef_JaffaCakes118
Files
-
45edff0c1f335c97d181d183a4dce9ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
597853cb1d66d511f29ba5cc7cef46ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
MessageBoxA
kernel32
FreeLibrary
GetModuleHandleA
GetProcAddress
VirtualProtect
advapi32
RegQueryValueExA
Sections
.text Size: - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ