Behavioral task
behavioral1
Sample
VDKiller.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
VDKiller.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240704-en
General
-
Target
613cee8803882ba2855d7c08eea38d06_JaffaCakes118
-
Size
197KB
-
MD5
613cee8803882ba2855d7c08eea38d06
-
SHA1
282e8ec061f3da853617ad112f946a955598e216
-
SHA256
baebee5d54d421dd92d48d1d316dff4439bc8e9d5ca8c8ec92370be63c990107
-
SHA512
6276bef74bd5aa1f97b11aea177b88ed4f8d8c30684e9b86f1be9026752a7e29c7ad5d338c58acef2b7d28bd45ca5bf6412f4bf32199ea526e7f1fc57be00f87
-
SSDEEP
6144:2Ithqr+n8y01sEwtkoeITHIPdQhPN+Xbu:2I6r+cs33HvOu
Malware Config
Signatures
-
resource yara_rule static1/unpack001/VDKiller.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VDKiller.exe
Files
-
613cee8803882ba2855d7c08eea38d06_JaffaCakes118.rar
-
VDKiller.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
使用说明.txt
-
新云软件.url.url