Behavioral task
behavioral1
Sample
fe428042acc91182eb9ec723def112c5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
fe428042acc91182eb9ec723def112c5_JaffaCakes118
-
Size
204KB
-
MD5
fe428042acc91182eb9ec723def112c5
-
SHA1
5e96de0089ee161e10fde19725a3af25b60c4051
-
SHA256
1e8fd008eb3130ea317b5792bf75d51ac2a538caa00b1838cbab30138a13468a
-
SHA512
6f26675b950a9d80c6e8acd0b1a324451e5e3e5008f423365bb6b774a2dd150363a5b2204eaf1a94af8227b10001462e7e98da862450caf4ae3ca59f31621d48
-
SSDEEP
6144:ht4mij3nXVbM7qLkctWHn56NdCT3EYK9yiGDwQDVS:Amij3nXVQqLVoHngNzGDw+I
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe428042acc91182eb9ec723def112c5_JaffaCakes118
Files
-
fe428042acc91182eb9ec723def112c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
3feb46202f2bcdda4ecaca94f18b5162
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2370
msvcrt
fgetc
kernel32
LoadLibraryA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetMessageA
gdi32
DeleteObject
advapi32
OpenServiceA
shell32
ShellExecuteA
winmm
timeGetTime
ws2_32
closesocket
wininet
InternetCloseHandle
avicap32
capCreateCaptureWindowA
Sections
.text Size: - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp1 Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE