Static task
static1
Behavioral task
behavioral1
Sample
DEViATED.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DEViATED.exe
Resource
win10v2004-20240910-en
General
-
Target
1292cf316afbae270ab4b0090352f538_JaffaCakes118
-
Size
111KB
-
MD5
1292cf316afbae270ab4b0090352f538
-
SHA1
bc522842ebc7bd7dc597aa4299b1ac09a700a95f
-
SHA256
ef1aa3670393c3e54980dbdca2b8789515b451cc2b0a4552264148e41b95a5e0
-
SHA512
738ab9f7891866295e0eb60f41198b83c23ba14c4f7fd02edd896265418629491544e1ae907e74d36366a6ffd4dd6604623ba7022ed60fd056a546dbaa387c14
-
SSDEEP
3072:IqXjkPow5oI+p9zEO73Q7+yJNJSfTWbSwgwwnZUm0:I0eSfpJEO7Q7bdICuIn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DEViATED.exe
Files
-
1292cf316afbae270ab4b0090352f538_JaffaCakes118.zip
-
DEViATED.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nfJBg86 Size: 512B - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nfJBg86 Size: 113KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
info.nfo