Overview
overview
3Static
static
3d3c42e6843...18.exe
windows7-x64
3d3c42e6843...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3QtCore4.dll
windows7-x64
3QtCore4.dll
windows10-2004-x64
3QtGui4.dll
windows7-x64
3QtGui4.dll
windows10-2004-x64
3QtNetwork4.dll
windows7-x64
3QtNetwork4.dll
windows10-2004-x64
3Samples/Sa...ll.pdf
windows7-x64
3Samples/Sa...ll.pdf
windows10-2004-x64
3Samples/Sa...ng.pdf
windows7-x64
3Samples/Sa...ng.pdf
windows10-2004-x64
3Samples/Sa...cy.pdf
windows7-x64
3Samples/Sa...cy.pdf
windows10-2004-x64
3Samples/Sa...ng.pdf
windows7-x64
3Samples/Sa...ng.pdf
windows10-2004-x64
3Vector Mag...te.url
windows7-x64
1Vector Mag...te.url
windows10-2004-x64
1blas_win32.dll
windows7-x64
3blas_win32.dll
windows10-2004-x64
3lapack_win32.dll
windows7-x64
3lapack_win32.dll
windows10-2004-x64
3msvcp71.dll
windows7-x64
3msvcp71.dll
windows10-2004-x64
3msvcr71.dll
windows7-x64
3msvcr71.dll
windows10-2004-x64
3vmde.exe
windows7-x64
3vmde.exe
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
08/09/2024, 06:41
Static task
static1
Behavioral task
behavioral1
Sample
d3c42e6843e2ac7deac0cd96deeb9ee1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3c42e6843e2ac7deac0cd96deeb9ee1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
QtCore4.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
QtCore4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
QtGui4.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
QtGui4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
QtNetwork4.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
QtNetwork4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Samples/Sample Output/Logo With Blending Small.pdf
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Samples/Sample Output/Logo With Blending Small.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Samples/Sample Output/Logo With Blending.pdf
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Samples/Sample Output/Logo With Blending.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Samples/Sample Output/Logo With Transparency.pdf
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Samples/Sample Output/Logo With Transparency.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Samples/Sample Output/Logo Without Blending.pdf
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Samples/Sample Output/Logo Without Blending.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Vector Magic Website.url
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Vector Magic Website.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
blas_win32.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
blas_win32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
lapack_win32.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
lapack_win32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
msvcp71.dll
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
msvcp71.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
msvcr71.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
msvcr71.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
vmde.exe
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
vmde.exe
Resource
win10v2004-20240802-en
General
-
Target
vmde.exe
-
Size
2.9MB
-
MD5
9314c71809c3bcd1e1ddd2b12985ffcf
-
SHA1
98786441ca863d7d59ef2be549c2ab13c22cec9c
-
SHA256
5519c58d1348857d9cb153419fbb43656cc2a69d63144ff4e68959bd59945d6b
-
SHA512
f502e2388e959a8c7e5337853c520d00d77bdbbbf46564d93b98dda5336f3cb47a3274f474811d1f547cb2e502a4b2058c33964176ae80041f4c2bb4d655946e
-
SSDEEP
49152:un6102qys+krRIRK0lTdGnqu03ezHwbBV32vMX/21QMdA5lFeERa4yp3w6umvb09:WR1+QROpdntgHAoM+15A5XRaZiKb0vF
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vmde.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2276 vmde.exe 2276 vmde.exe