Behavioral task
behavioral1
Sample
b3237f72aa542be94bc03e10841f002a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b3237f72aa542be94bc03e10841f002a_JaffaCakes118
-
Size
630KB
-
MD5
b3237f72aa542be94bc03e10841f002a
-
SHA1
07ccea98044e347a97cb2ddcaf9e05d9a223329c
-
SHA256
cceac2a6eedb19c31c4fa47a35647c0be6fcb5f9f70c820fbeac0fea6b2739cc
-
SHA512
2cdc0a7358d2e15916a2e1db03d0a83877507d7605d5dc5d04954d31c2f44bb3840fc3aa09e0617172b7f95f7024b7fe3ae0793372679e14fd7bdf76042f3aa8
-
SSDEEP
12288:38gAXcR0l086FlAdXlMI5OR054GbKa7igSbV8FsBRGDAAnbIdIEqyo:s5XcRm+sXROR0bba5ksAnb+IES
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3237f72aa542be94bc03e10841f002a_JaffaCakes118
Files
-
b3237f72aa542be94bc03e10841f002a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 629KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE