Overview

overview

7

Static

static

7

Plug/Infect.dll

windows7-x64

1

Plug/Infect.dll

windows10-2004-x64

1

Plug/Mir2.dll

windows7-x64

1

Plug/Mir2.dll

windows10-2004-x64

1

Plug/PlusCtrl.dll

windows7-x64

1

Plug/PlusCtrl.dll

windows10-2004-x64

3

Plug/PlusFile.exe

windows7-x64

1

Plug/PlusFile.exe

windows10-2004-x64

1

Plug/PlusFrame.exe

windows7-x64

1

Plug/PlusFrame.exe

windows10-2004-x64

1

Plug/PlusSock.dll

windows7-x64

1

Plug/PlusSock.dll

windows10-2004-x64

1

暴风压�...��.exe

windows7-x64

7

暴风压�...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb8920a7897839268e575a2db9ca1779_JaffaCakes118

  • Size

    1.3MB

  • MD5

    fb8920a7897839268e575a2db9ca1779

  • SHA1

    edf83eeeb4852857aaec98cb1014b3689ee72261

  • SHA256

    d1542a392a72cc065c266ff2557f9ca22adc00260d29a3fa9962923b62148bde

  • SHA512

    67f27a2c2254c68b5fbcaf539b2b1c5e5887ac51bfe9fa4427bae6f999ad50122345d577b99c0524e518564d17914e0b25715b4424639cdb6558291a8ee412ab

  • SSDEEP

    24576:8W9ji+dAqLnMYzke6Ah3ZlSkEheYbexSt3zCcdZk2YJwCdKVTrFFw39HCm:8Wdi+7zMcp64PFE4uSStDCcdSJwCkVTE

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • fb8920a7897839268e575a2db9ca1779_JaffaCakes118
    .rar
  • Plug/Infect.addon
    .dll windows:5 windows x86 arch:x86

    00c5fd00087020a0645079ce30f4148b


    Headers

    Imports

    Exports

    Sections

  • Plug/Mir2.addon
    .dll windows:4 windows x86 arch:x86

    d089640c69b679d2a7a661b8a644e53a


    Headers

    Imports

    Exports

    Sections

  • Plug/PlusCtrl.dll
    .dll windows:4 windows x86 arch:x86

    58d55af8102a3f0415f12e07d2d6ebca


    Headers

    Imports

    Exports

    Sections

  • Plug/PlusFile.exe
    .exe windows:4 windows x86 arch:x86

    4321ce7351372e87a26565e4283ef678


    Headers

    Imports

    Sections

  • Plug/PlusFrame.exe
    .exe windows:4 windows x86 arch:x86

    1b35bd64c4fefcd43b010b543afb4a16


    Headers

    Imports

    Sections

  • Plug/PlusSock.dll
    .dll windows:4 windows x86 arch:x86

    a9651f6bc2f69e9eb98bc16921d42a05


    Headers

    Imports

    Exports

    Sections

  • 暴风压力测试2012夏季穿墙版无限制版本.exe
    .exe windows:4 windows x86 arch:x86

    ce49bc06e6d44a905ba7e445648ca386


    Headers

    Imports

    Sections

  • 说明.txt
  • 软件使用教程（必读）/1.jpg
    .jpg
  • 软件使用教程（必读）/2.jpg
    .jpg
  • 软件使用教程（必读）/3.jpg
    .jpg