Behavioral task
behavioral1
Sample
85cd86b21d8021dcce428c9882b3f07d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
85cd86b21d8021dcce428c9882b3f07d_JaffaCakes118
-
Size
28KB
-
MD5
85cd86b21d8021dcce428c9882b3f07d
-
SHA1
464442715caaa5d563c82b9adfa8401617a5c731
-
SHA256
d980a4e2ffe70b4fcd61eb9b7a636ee6685967e2caa62fb63b57d1b51387377a
-
SHA512
c357022b89bcd7d5f4a8fb9b6a1a93fb6591e1dbbed82eec242a99098dc911417aab8d6d78c88c7fac817cd920921947e98dce3f614c5b2f8fb4bc060ca69815
-
SSDEEP
192:FQQcW9gVN17SgvyCSvbc/qRta19hxWQaw9zHJ3e4kJ3n1WHRijJsR5YhvpcI9tAc:6Qz9sBnvyCSVaxBBToWSiRChBZX
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85cd86b21d8021dcce428c9882b3f07d_JaffaCakes118
Files
-
85cd86b21d8021dcce428c9882b3f07d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 4KB - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ