Behavioral task
behavioral1
Sample
09c12b8a35715303f43cf5bd022ab86f_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
09c12b8a35715303f43cf5bd022ab86f_JaffaCakes118
-
Size
82KB
-
MD5
09c12b8a35715303f43cf5bd022ab86f
-
SHA1
fe146da1555e3ab2a6de75af05faa4d3766389a4
-
SHA256
896a746999d97d76a217d56836f7e6b8595e62636e14fb724ecafc91a02e0e63
-
SHA512
63d2e587e7a7eef20782f7525d0097083367cc9abb856efb0e4e2cdf22a8585f63452546aed35f083707c6c3d850a0fa3e6a1bfc6810b5cbad9801e474b259e1
-
SSDEEP
1536:eVSwS4HNscNPfmxe/I1LMrJWsB8l5/NdWu7m+n+3eR8UCas:/zmZNHmxeA5MMISX97n0Q8UCa
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09c12b8a35715303f43cf5bd022ab86f_JaffaCakes118
Files
-
09c12b8a35715303f43cf5bd022ab86f_JaffaCakes118.dll windows:5 windows x86 arch:x86
b0d19e4e88dd365af6ada1599a174eef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DecodePointer
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetAsyncKeyState
d3dx9_43
D3DXCreateFontW
msvcr100
clock
Sections
.text Size: - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ