Behavioral task
behavioral1
Sample
123b68685f61bbd189f00577fa4b9176_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
123b68685f61bbd189f00577fa4b9176_JaffaCakes118
-
Size
715KB
-
MD5
123b68685f61bbd189f00577fa4b9176
-
SHA1
2e9a92eeeefaec62092655527dc486d1a27b9fa6
-
SHA256
89ac90d98f23e1b0d648363b6f4d2ec7355d7f642cc7cb9a42abefb55a5a5607
-
SHA512
3c81ddde50dc52d69cba02b540e9faff5f7d25981c1000c33389eb4405f55c4baea68d9200ce05d7d5d4ad0435cd76671b810a18d5480c6c3e4deef034f46f9a
-
SSDEEP
12288:riJfaxer6HB6AuY6PxMkDsdHOASzBO+gJn1LxqfJWH:riJ3eQYcxMkYuArxqfgH
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 123b68685f61bbd189f00577fa4b9176_JaffaCakes118
Files
-
123b68685f61bbd189f00577fa4b9176_JaffaCakes118.exe windows:5 windows x86 arch:x86
cd8de569d5a269d9c160d170da3807da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
wsprintfA
MessageBoxA
Sections
.text Size: - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 504KB - Virtual size: 503KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ