jaffacakes118_ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2[.]bin

General

Target
jaffacakes118_ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2.bin
Size 44KB
Sample260924-b7739abe59
SHA256 ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2
MD5 b9438bf14021cd32529cc9184ab4b2e8
SHA1 4b4c73890791a64094d63b692a63da4a63a14f3f
SHA512 28d54067507fa2e45b580c2da9548b1c95091e67444b520ac51eb47e0991ac41e13fdae8291032091b1a19c3ee2a837a5a7629889c3d4327f88e4d02b4bb3378
SSDEEP 768:6mmIAVwBQbltmcnBfnoq6pD+foeHUaEiKkNNsKFtrevv2U:6IQb2cBfnoyfo2UaEiKSYvv2U
TLSH
T191138C7593C590F1DB4E29743C4ABABF9A6B602162B649E24F93DDE0047B392F13C742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2.bin

File Explorer

jaffacakes118_ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2.bin

.dll 44KB

jaffacakes118_ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2.bin

SHA256 ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2
MD5 b9438bf14021cd32529cc9184ab4b2e8
SHA1 4b4c73890791a64094d63b692a63da4a63a14f3f
SHA512 28d54067507fa2e45b580c2da9548b1c95091e67444b520ac51eb47e0991ac41e13fdae8291032091b1a19c3ee2a837a5a7629889c3d4327f88e4d02b4bb3378
SSDEEP 768:6mmIAVwBQbltmcnBfnoq6pD+foeHUaEiKkNNsKFtrevv2U:6IQb2cBfnoyfo2UaEiKSYvv2U
TLSH
T191138C7593C590F1DB4E29743C4ABABF9A6B602162B649E24F93DDE0047B392F13C742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmp1

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_ddb95237b94a9eb58c3ff4ec1ab1bd3a3c16e7a27555ad17061b22a9870d88f2.bin

generic