7d2a85a2e32510baf9ed4c91ba5d9b4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d2a85a2e32510baf9ed4c91ba5d9b4e_JaffaCakes118
Size

1.3MB
MD5

7d2a85a2e32510baf9ed4c91ba5d9b4e
SHA1

586b1bc532ca928c4f3e15fadef3157d1693bd9d
SHA256

5db7fcce33928dd8132616d8016aae31088380216a1cabb2b17c4d1161ce60dc
SHA512

0982ee0f9f10ac99716759ce8c30b7b97626355f5573b02cb282ca8bd9c4af4e7271aaa253c9b84563670f689e133d510bd8042a99156734e165e9456421ffd6
SSDEEP

24576:Pv/ehGqZGWU7bTTmjT0hpWzKzIbj1R/biihnNtvbuhZUTdBfIgvUcZsenm05P:fYjAWUmX0hozVbBR/bThnLb1bvUcX

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d2a85a2e32510baf9ed4c91ba5d9b4e_JaffaCakes118

Files

7d2a85a2e32510baf9ed4c91ba5d9b4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 714KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ