General

  • Target

    0c7fc4ea9c3cda7207c1d767460b7043_JaffaCakes118

  • Size

    14.0MB

  • MD5

    0c7fc4ea9c3cda7207c1d767460b7043

  • SHA1

    ac7f388aa95bbbd96e6e7a4f7ad4add762dc7e1a

  • SHA256

    083445c22f1c79782151945fddf847804ecd5de3dec386df1066d1e64f95922f

  • SHA512

    cef51e02833ce40478b2e0764c927478f5791ddadcf7bbe392182654718df6946f8b8b52cec118e55537374d08a62e8d7a6e3ab02e84639beb9e8c77e9812a00

  • SSDEEP

    393216:hEGrbtTr9vgwqj5fQpK5pDWOhN1dyP68o/6Fu4Yyyf7uzq:Mwqj5opwWEkPKV

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c7fc4ea9c3cda7207c1d767460b7043_JaffaCakes118
    .zip
  • 东坡软件下载.url
  • 东坡软件下载说明.txt
  • 网吧/www.xiaodao.la.dll
    .exe windows:5 windows x86 arch:x86

    bee2ef043713c6eb5bc3f7f7d9d1b214


    Headers

    Imports

    Sections

  • 网吧/使用说明.txt
  • 网吧/启动破解.EXE
    .exe windows:4 windows x86 arch:x86

    dc619460317812d67c45419ce8a35def


    Headers

    Imports

    Sections

  • 网吧/录像1.exe
    .exe windows:4 windows x86 arch:x86

    4767b8d3bae56f985ad4eec2f90e8724


    Headers

    Imports

    Exports

    Sections