Static task
static1
Behavioral task
behavioral1
Sample
VVPlayer1.3/Update.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
VVPlayer1.3/Update.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
VVPlayer1.3/message1.html
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
VVPlayer1.3/message1.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
VVPlayer1.3/vvplayer.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
VVPlayer1.3/vvplayer.exe
Resource
win10v2004-20240709-en
General
-
Target
3dc480d32bf29d5a9b64db270bb9a648_JaffaCakes118
-
Size
808KB
-
MD5
3dc480d32bf29d5a9b64db270bb9a648
-
SHA1
908d80fc6bc1cab768146ee53a912f0f5047fdc3
-
SHA256
0e592fceadd76cf7f3212a38cc26837d7a45d638dac9a8128c47f39c8dafae1c
-
SHA512
53b4ced706e5d534a7c8b2e364042c48d697e3aec662d6cff8b764f0944e75acd5eca8e78ef0d838e037b8d415af8fabaedabb81320e0d68570a7f2432c449ab
-
SSDEEP
24576:M3FkUYOabQxJ/i3azZbyzFzx9aoIuKgeIdR4VznB:M3FtVTi3aoAoIuKgesO
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/VVPlayer1.3/Update.exe unpack001/VVPlayer1.3/vvplayer.exe
Files
-
3dc480d32bf29d5a9b64db270bb9a648_JaffaCakes118.rar
-
VVPlayer1.3/Update.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 600KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
VVPlayer1.3/chis.ini
-
VVPlayer1.3/list.sui
-
VVPlayer1.3/login.sui
-
VVPlayer1.3/message1.html.html
-
VVPlayer1.3/new.sui
-
VVPlayer1.3/setup.ini
-
VVPlayer1.3/vvplayer.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 665KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 953KB - Virtual size: 953KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
VVPlayer1.3/vvplayer.swf
-
VVPlayer1.3/下载说明.htm.html .js polyglot