Overview

overview

7

Static

static

7

2016盾/2016盾.exe

windows7-x64

7

2016盾/2016盾.exe

windows10-2004-x64

7

2016盾/Cache/Dun.exe

windows7-x64

1

2016盾/Cache/Dun.exe

windows10-2004-x64

1

使用说明.url

windows7-x64

1

使用说明.url

windows10-2004-x64

1

独特论坛.url

windows7-x64

1

独特论坛.url

windows10-2004-x64

1

进入独�...��.url

windows7-x64

1

进入独�...��.url

windows10-2004-x64

1

黑客培�...��.url

windows7-x64

1

黑客培�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    134c441081da6d9ec41cccffcd0db7be_JaffaCakes118

  • Size

    549KB

  • MD5

    134c441081da6d9ec41cccffcd0db7be

  • SHA1

    7aaab4c9ca9bd9531469e954cfe8076a5e6ba704

  • SHA256

    13b88476f38e43bc272f824da305318b271ef5fcb292e868d1017fd875536e46

  • SHA512

    8f2101161d7190f63332d5fff4d807fe63a1c477a920d8d8546bf344e171060a8c40d85bd42fbbae7da8a8bce4b2cf4665f925c5c3f0a1b98287115761ebf7fe

  • SSDEEP

    12288:CaxZ2BXhAdcowNYsSekbWXOHpDduh6glq1jx/l:NgYgYtfbW+HpDduh6glix/l

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 134c441081da6d9ec41cccffcd0db7be_JaffaCakes118
    .rar
  • 2016盾/2016盾.exe
    .exe windows:4 windows x86 arch:x86

    8b969f807e78c7bff86b93712e59f1b0


    Headers

    Imports

    Sections

  • 2016盾/2016盾.ini
  • 2016盾/Cache/Dun.dat
    .exe windows:4 windows x86 arch:x86

    f8d38b4bfd35b823273dad309ceeee2d


    Headers

    Imports

    Sections

  • 2016盾/更新记录.txt
  • 使用说明.txt
  • 使用说明.url
    .url
  • 独特论坛.url
    .url
  • 联系黑客.txt
  • 进入独特论坛.url
    .url
  • 黑客培训加入我们.url
    .url