Static task
static1
Behavioral task
behavioral1
Sample
VenShingCrypt/ReadMe.chm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
VenShingCrypt/ReadMe.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
VenShingCrypt/VenShingCrypt.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
VenShingCrypt/VenShingCrypt.exe
Resource
win10v2004-20240802-en
General
-
Target
d39eca99f2f5c116de0ad0ce0a660a01_JaffaCakes118
-
Size
76KB
-
MD5
d39eca99f2f5c116de0ad0ce0a660a01
-
SHA1
19f0acda6674de7b45fd16a7ad891f4d8a85f5c2
-
SHA256
25f4eef40a819b0533e3d2f50fde5386c145f44c14102faa6697798a4bfa7eb8
-
SHA512
86a29fae868d3f62f4ba16eabbe9933250260c617a189aeb042094f14b7efdbe497bee524abb0f6fa4bcb9d7aee3895568cfa9601363f990fbd8979652fe20c2
-
SSDEEP
1536:/b3AZIUSc7Osu9/rB+iFzqb5iE4qzfbI1b1k16wBAmwv3/xic1PAkD2Xvk1Nvq:/UsWOsuF1qgE4i81b1TwjMpiQPn2svS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VenShingCrypt/VenShingCrypt.exe
Files
-
d39eca99f2f5c116de0ad0ce0a660a01_JaffaCakes118.rar
-
VenShingCrypt/ReadMe.chm.chm
-
VenShingCrypt/VenShingCrypt.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VSC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE