Behavioral task
behavioral1
Sample
8bfa295f9ba1cd49657b5d7b0f3300f2_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8bfa295f9ba1cd49657b5d7b0f3300f2_JaffaCakes118
-
Size
402KB
-
MD5
8bfa295f9ba1cd49657b5d7b0f3300f2
-
SHA1
dc5f25c505ccd849fb22c320f0acd3ee3f8b6acf
-
SHA256
8cfe59b005170cfd5c78bb30c15a4285177c303deff572f7ff2e493a56bf322d
-
SHA512
02caff9ed009ea796449797421d3f332cf44f0b228a1670cfbf84a3e391a452c399abc63370d0f3b8a00ae61d7bd1070a7ecfd85804ae823778cf1cd3a183b08
-
SSDEEP
12288:B8eP7T6osxuHWQRQaJ7x81OBYoLsfkyqlqPYBc:B8uX6osc2QR50O2o1S
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bfa295f9ba1cd49657b5d7b0f3300f2_JaffaCakes118
Files
-
8bfa295f9ba1cd49657b5d7b0f3300f2_JaffaCakes118.exe windows:5 windows x86 arch:x86
762ab678f220fc01c073df3b8da997bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetMessagePos
MessageBoxA
gdi32
PtVisible
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
OpenSCManagerA
shlwapi
PathFindFileNameA
psapi
EnumProcessModules
version
VerQueryValueA
oleaut32
VariantClear
wininet
InternetConnectA
Sections
.text Size: - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ