C:\Users\Ace\Desktop\New folder\Pinnacle\Release\Sacred.pdb
Behavioral task
behavioral1
Sample
15ab10f676a2ab7eb5f5a8e744ae3791_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
15ab10f676a2ab7eb5f5a8e744ae3791_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
15ab10f676a2ab7eb5f5a8e744ae3791_JaffaCakes118
-
Size
170KB
-
MD5
15ab10f676a2ab7eb5f5a8e744ae3791
-
SHA1
b814dbaf461164f3f355caf2fd2d1f907adcd738
-
SHA256
ab34766a77bec3be56e293661e5952d72d181036c094e5ad7c7614a170f384ee
-
SHA512
0da3c05ca3f3f13490664edf7302bf0e95bfd2ebd3e47e6b54f098642b0eed5f07fe17bcec1255351bf85f475e25fdf4788c639d6c3daf49c057a3ddcd8c4dca
-
SSDEEP
3072:nlmUiWQLvTZQXqa8lpoo/NlBdJTsUBLZBRMb6RkRk3rW:n9iWqIqa8fn/7BbLdM26Rwq
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15ab10f676a2ab7eb5f5a8e744ae3791_JaffaCakes118
Files
-
15ab10f676a2ab7eb5f5a8e744ae3791_JaffaCakes118.dll windows:5 windows x86 arch:x86
b408d5c80a12687eb6167345f14bb66b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
IsValidCodePage
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
?temp_function@@YAXXZ
k����) �9TR'���.=�)��G�Tn�^|�8lK����8�P�;��V����&Ӣ�Q�NjC��j�G���{�"څ��$U�В���/-K �����>+oҘ�u^�Y��@0��i�:Q�A�-.���N��a����A��Mh]˱�C��<���&L�?�Ԣ�*���N�1 ~�*��\\���8�� ��Y�3rrH�+@�&�O�ȼX ~f�ֶZ��!����/W�iCF^� i-��.���5�ᅣ�6��_���g������TEC{^e�r��b&�Ӕ��_6uø���r�-KsRY}5�P�<�x�����}:�2��m��Pj��F��@���%�hz]����M�巠$�-g@l�%mD����/h�>Γ�����ht�ߒ*"�(��Ҕ�ncX�MX_��-BjQ��c���~Q悧 �xh 1`���Ƀf��d�}7��V9�u �o�1N��Y!�/#��t+�9%)���G(�D�� ����m��6�sA<��Xr�y�������Q $�dF0�>���A�ǯV���������R:fY�cf/Ovv�@�h��V��<��mD/ �e��xa�� ���H}F��6C�܋W�x�Z`pI�4�L�r�!%Q�uB��p�CNTAgNU��t�e!��V$���Z�>��G%$�����¥� `��/%�<���<���cxi+`�����n�GL;�rO+ny����!��2���c~߽�l؏�G�5%�Ø����>L��꽟��ۯe�<�g��d.9]�q���e�Jy�9�����6M�Q①�Y��F�$��4p�8��$���Y��a� _�Ȯ ��$Nfg�'���Y��i��$f������X��Z������H}Sl#+z��%��\;��S�[�;����,9u��� M} ���`g<���Eԗ�4�H�@#:��x��0n�|�v� ]�b�b��'j�LRh�(�LҬ�.PiϦ꼹���z�|�b=������_����5�����u�q�ګ,͋�0H��5����^1\���t�:��(���I���������[�dh�>nl��m�#���}��O2]�uEX%r98�Jz] �Ȕ���m�F��TƟ�hMDzE�~ O�xE��t�V�t�G�S�)VŶ߽�)�n:G�d@�*��6�-轅�;����z!�#< 3]|eb���:�mY�q%�!�s{ �_Tƕ��*뮥�*�R2a�%������у�)P�B�VrU�z�&�9����zhc�GHn�Ǒ��:w�B�I�v��KE "qn� �� 忹�<�Y.���m�ٌ����3LՔ���d�ǵ��-�{.��/����6w�h~W�|pg�F��R�5={y�o���i����[��}��WB�� ��RS]4CrϠ6���˽u���pt�(�3��������!f��y�k=|�V=M�J�G�z�J{9��b���������b|Yϖo~J�����2�������~v�4kҳ�W�6$s �{�ǚ���69�����R)���X!P%����&�܊�1m�e�e��.�� -�ᶯ�0����d�G�!��#,�lh�3�ΰF0�m�]��(��(#D"���Y�o�� jz� "����H9>���v5!I�K�UX�ԑDU����?*sy������ޑM&�C�c��6�9tIa�|S~�P���1��*�&�^{����tv�?�#�Nt��)P'���D��Ue����Fy�����)�����/N^o5�W�z��~��ԇ�P!1��[#c��3x fsW:.v^��J(M�8�r~% @$f�M�|��<.�w1���hf�j�n2@��:�Ő������h�� ������e̫��FX���J9���p�,�i������)�XEAF�/��?f�GX9��=����C7w��t]=������0ړ0��6���1�^A��E�����r'/f�f��X�G5�p,r����^Z�tw�ʨY��e������ 7͜T#�K�˘�*�SY2ٯ��fd���oH�b�|b�Snػmũd�d���������Ⱦ��J��Q��������S���θ�+�bj���'�x6��HMI��$�ǩ�¯CJL|�y���]3�@?�Z�vy�V���!��K��A�r�L_k�w���}�w?3Q�/ P�����λ���2��RK:^�B�cuL~d璟�dI<����}���� Cv�8V'�����}�H���9إd#,��P��}�#{���B�KI� V��P3���j^��}���rl�~_ġB]h�x���c�9u7%&b����+���aWlN�Ni�T��� j����ݮ��K�z���b�D�>`�)ԯ��xI��(}�-p��L⩺�������2g@�4����0%DŽ����� ��f��}����`9i���Lgmd��}��&� ���t���B����Q@q.|���nq>�n�E�����9Gbs0���q��Z3-��� M'�^3e�2gDx�_���_O���s��Z���v�?4`�G�u���_ ؇�Юh+ 9��(4��c��4���2~�N�F��07�3B���te ��2Cp]�*kl�M����v�"�/n�&��~�qp��(�A�BF��Ve����L��B}�qI#y�W瘼�+���>�g���A��~?��4���;@�>�t^P��Ѭ�.ר!c���0�*J���LX��\5k��0d�,^j�6���Cd -R���H�X����X�6��� P�KX`?u�3�o� ��x��%2D��_��G���dܧ�����$����k��,�顒��7"�cL���[���}L(�'��7H�mKO�'d�FN�U���Jov:��}�U��� Ld�1���nfq���)��A�o�Dv`�_�m��گ�&kZT�L����>U#~�7��~��6�Jb�����z>�|i�)���~p�^s��4�K_؈ϸ�5��A� ���x�YVc�I�nL�ኒ ������j���F��/d&�����d��d��:� �5�O� �c�3º�l RRz�� ,&ŵ-cz
Sections
.text Size: - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ