d60b9c3caab928f03d50629805842476_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d60b9c3caab928f03d50629805842476_JaffaCakes118
Size

1.9MB
MD5

d60b9c3caab928f03d50629805842476
SHA1

c12a15b5ad69412f4ae85cb2cd78c97d3ebbe20f
SHA256

84cb5007367494d6481a081a467704ca1343c336b95c250085c346e7b81f47a5
SHA512

011b889d9884478b36678825e42964db782410dfb18d62ba69a2fb4ec668d90141ebfe3136b947e0c760a37e7c0c886c18ad92116689fd60d77ccf0ba7857068
SSDEEP

49152:SmcTIsNGjcKZA3OSQJVZ+5LA0hhKkBRDJIDSKR4y1:LTWOj6AshKkBRDJIDSKR

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60b9c3caab928f03d50629805842476_JaffaCakes118

Files

d60b9c3caab928f03d50629805842476_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd2b2449d959b9a8315ecf4a6f63472b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

CreateWindowExA
MessageBoxA

gdi32

CreateDCA

winmm

midiStreamProperty

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleRun

oleaut32

VariantClear

comctl32

ImageList_Destroy

ws2_32

recvfrom

comdlg32

GetFileTitleA

Sections

.text
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd2b2449d959b9a8315ecf4a6f63472b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 440KB

.rdata Size: - Virtual size: 1.2MB

.data Size: - Virtual size: 205KB

.rsrc Size: 8KB - Virtual size: 21KB

.vmp0 Size: - Virtual size: 368KB

.vmp1 Size: 1.9MB - Virtual size: 1.9MB

.text
Size: - Virtual size: 440KB

.rdata
Size: - Virtual size: 1.2MB

.data
Size: - Virtual size: 205KB

.rsrc
Size: 8KB - Virtual size: 21KB

.vmp0
Size: - Virtual size: 368KB

.vmp1
Size: 1.9MB - Virtual size: 1.9MB