Behavioral task
behavioral1
Sample
7110e913ea618f9586e1f32cf274c69b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
7110e913ea618f9586e1f32cf274c69b_JaffaCakes118
-
Size
255KB
-
MD5
7110e913ea618f9586e1f32cf274c69b
-
SHA1
91651444b5cd149beba660e1d417223547ce1530
-
SHA256
285b1913549b164cd4686cb937a470bb979f2d94b2aeee0e4823fa53d13948c0
-
SHA512
7e164cf168c347dca3799eb5a443594748d4e02256ca4295e4e48024131a6e8c86f6e168bbbead42dcee614889ffd8aa5d5194a0cece48dffc708ab946b5a286
-
SSDEEP
6144:8mbhPZ/Zoa8CG24KbzYDVg0XvBqpeqhWKg8uGhk+1B8I3Odw:8gPXG2HbzaTqpZEdcLl3O
Malware Config
Signatures
-
resource yara_rule sample upx -
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7110e913ea618f9586e1f32cf274c69b_JaffaCakes118
Files
-
7110e913ea618f9586e1f32cf274c69b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f42c806896b6b736c04a736f08defc48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Sections
UPX0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.By:ɵɵ Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ