General

  • Target

    d65f979c6ab742c7f4e516e6af4191d8_JaffaCakes118

  • Size

    399KB

  • MD5

    d65f979c6ab742c7f4e516e6af4191d8

  • SHA1

    0d1e7d9e2a2ee1105a32d2312050eee898b14ef5

  • SHA256

    2c9bab2b3c1087d6b706b20808779ee927b77c8fdabec8bee25c54055abdc92b

  • SHA512

    cfa9721fb53dace2f3a7a9a3250df20302a84811e3e727a53085d8e8c1fb6eb65b6d4ce2efc44400254ec163b9f53303f9e4075de2bc2b915942b8c17a9cf823

  • SSDEEP

    6144:SYpl/lZkC0XzPCXmrVEm2werH/40qk+P/pNUQ61NKs4i7dZvdQkuwNaSJ:SYpl/lZD0jqbwA8hW14s4i76wNaSJ

Score
10/10

Malware Config

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d65f979c6ab742c7f4e516e6af4191d8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections