Behavioral task
behavioral1
Sample
dccaed26d81576d62faeb705659fdeed_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
dccaed26d81576d62faeb705659fdeed_JaffaCakes118
-
Size
238KB
-
MD5
dccaed26d81576d62faeb705659fdeed
-
SHA1
00bb8eb15380568c3c4c699dec638c1b8c51763a
-
SHA256
44f01e5452e26ae5e17af215d6e5c150645a8c6539ade2cb85fedcade555601e
-
SHA512
cc5e9f6797b8726f8751cbc27fa0d70e359c539761522c9f31f0e364048ed5f8755231eb46624e72669c840fb9a5bbe4f1dbb5528ae0171418c32350e92b5ec6
-
SSDEEP
6144:xrpoUSaDVxOruJqADo8xP7nRC9LmizY6kzU:5OMVA+d1P7RQL7c5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dccaed26d81576d62faeb705659fdeed_JaffaCakes118
Files
-
dccaed26d81576d62faeb705659fdeed_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 170KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 32KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE