MyGrandDog
Behavioral task
behavioral1
Sample
a7298722fb963fe3e15c0314ac5e7dd5_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
a7298722fb963fe3e15c0314ac5e7dd5_JaffaCakes118
-
Size
236KB
-
MD5
a7298722fb963fe3e15c0314ac5e7dd5
-
SHA1
bc024dcb6566922471d0c903ee75a31349bc2215
-
SHA256
47fa1bd16c700abeb6be97f1a27ccb8a6032b1ea5590c4fa82a099f92e5c661a
-
SHA512
723f1a82132b67ef30ec63947c607f12b8841941ab81cd4ae959853b4e68241997213dff5106753cde498a33b7102ba86fe4cd8e1bc9029c382eae600e78f40c
-
SSDEEP
6144:o8EPWvBSkJsgveeS1O7HuNHP/zo9HCl7gPbPIj41:o8jBPJHer1IuNUjgu
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7298722fb963fe3e15c0314ac5e7dd5_JaffaCakes118
Files
-
a7298722fb963fe3e15c0314ac5e7dd5_JaffaCakes118.dll windows:4 windows x86 arch:x86
94fb4658fb378d583dc45badd573d38d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ