General

  • Target

    fd1c69ff739dfb3b5d6a63936acc2a63_JaffaCakes118

  • Size

    2.0MB

  • MD5

    fd1c69ff739dfb3b5d6a63936acc2a63

  • SHA1

    7b93617e35d0790b8756002f96108a27d154a9b7

  • SHA256

    d1bdc53bf9dab112bc4ec5dc6d5cb12431cef0a43ca721acb61d836bd6ea0f81

  • SHA512

    c01fd8186e8dc1fa80a54bbfc8a527977d2c463af323ea4064361972a87fd82df4a1492e55777fb4880e56108570cd67b36825f088ffee77e81bed4d5f2a0a75

  • SSDEEP

    49152:USTyzG+0U3j1ULeqEivR9dZjgso4Mt56Puk9rSs:U+M04Sq2p97jgshMtgWASs

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • fd1c69ff739dfb3b5d6a63936acc2a63_JaffaCakes118
    .rar
  • Builder/Loader.exe
    .exe windows:4 windows x86 arch:x86

    b7830dc7b5f0393ff9eae99c13812352


    Headers

    Imports

    Sections

  • Builder/builder.vmp.exe
    .exe windows:5 windows x86 arch:x86

    03dbc8892a5a048d83fcf371f020f2b7


    Headers

    Imports

    Exports

    Sections

  • Builder/collectors.txt
  • Builder/plugins/customconnector.dll
    .dll windows:5 windows x86 arch:x86

    546d75fcac232730adf8c1bfc663e9cb


    Headers

    Imports

    Exports

    Sections

  • Builder/plugins/customconnector.dll.cfg
  • Builder/settings.ini