General

  • Target

    0c8e478798ec9bc4a7d2688bed8695cc_JaffaCakes118

  • Size

    5.7MB

  • MD5

    0c8e478798ec9bc4a7d2688bed8695cc

  • SHA1

    d35167a4d3dd3180fb9d4720cf2d3df5e13b58ca

  • SHA256

    1ccd0bcb36becb96fc4e9097ba44d54fa854716ffdf2909d5e19c686e91c364d

  • SHA512

    cab5aaf1da8b195b2fe8ce14eb9162ffc65976ecdc8bde7eb263fa7c79f2da2ebe1e54969c45b2d0efd6d402c3303f44694d17e421339ef1107a1e4a584e23a9

  • SSDEEP

    98304:bzuR6vhYuBfjXKfDvc0B2qws1NSDf36utFWnPKnEBRu0h+SuDy2mggMofzkn0PcC:bzsYhVXKfA0XQ6u+PJu0h+XD1hKknnZU

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c8e478798ec9bc4a7d2688bed8695cc_JaffaCakes118
    .zip
  • GameHelp.dll
    .dll windows:5 windows x86 arch:x86

    7253a6117c33e4165e1505abe9fd00f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MainData.dll
    .dll windows:5 windows x86 arch:x86

    cfc37e4b62c69429f35a6d148e169cf0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SanOLLamp.exe
    .exe windows:5 windows x86 arch:x86

    0125365d85ebcbe591b4e01b5d794b48


    Code Sign

    Headers

    Imports

    Sections

  • UpDate.exe
    .exe windows:5 windows x86 arch:x86

    a8bed59d35adf543c3d2adbf8d3203e2


    Code Sign

    Headers

    Imports

    Sections

  • curllib_7.21.1_VC90.dll
    .dll windows:5 windows x86 arch:x86

    f94ac31a021900a13b769b5988419405


    Headers

    Imports

    Exports

    Sections

  • libeay32_VC90.dll
    .dll windows:5 windows x86 arch:x86

    d4b9c3b78a0ad871e8057f6cfbcfaec3


    Headers

    Imports

    Exports

    Sections

  • ssleay32_VC90.dll
    .dll windows:5 windows x86 arch:x86

    5aa32a0a0feac6ea2408234cdf25d8c7


    Headers

    Imports

    Exports

    Sections