General

  • Target

    00451049bee14f4dbffaa66c56d9e215_JaffaCakes118

  • Size

    2.2MB

  • MD5

    00451049bee14f4dbffaa66c56d9e215

  • SHA1

    244b29c0c6b9ce5b60b2f12fe34bedb698e95a34

  • SHA256

    a07b6394cdfefb4f3c325f88226af9357d2dd3d0a40facf0364cf31ce75ca495

  • SHA512

    b9ababced5f39160851ab38f23d06a00b355efc252358047c3b991c1249e77ff4c54137008aafff091ebd88e1fff9185e8eafece272c308d48368b143e2fcd65

  • SSDEEP

    49152:8uWfg68bJCdYCMnx3Y1WFEcgBBLaJzqzkwG805yyd2blytwE9:ygHcuZN/EzBZa98vG95+2R9

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00451049bee14f4dbffaa66c56d9e215_JaffaCakes118
    .zip
  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    d940cf5b3d0dfb340396c0608ef1a0c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • comctl32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ʹ˵.txt
  • һִ.exe
    .exe windows:4 windows x86 arch:x86

    a657b37bf0b90410582ac87e5d9cbe6d


    Headers

    Imports

    Sections

  • Ӣtxtıv3.4.vmp.exe
    .exe windows:5 windows x86 arch:x86

    e7f16b9e64afed7d904dc4dddea00b3f


    Headers

    Imports

    Exports

    Sections

  • ı߾Ӣtxtı v3.4ɫ_ - pc6վ.url
    .url