General

  • Target

    16636cac259e052b046e2d54cbbd870c_JaffaCakes118

  • Size

    134KB

  • MD5

    16636cac259e052b046e2d54cbbd870c

  • SHA1

    691ff84efd6a10dcd23b4fdedefd48c8f644e0b5

  • SHA256

    57ba34a87a6ffa1e7aedb1d574a77c749b58e394d04067630c7c15aa380442c7

  • SHA512

    1ea978f60280bd1fc33808d85c354871b7c3f1d45520f9250b0cb9b8f34953a8b063da5509b56e5f54209a50709faee9fb3bc402f2721deaabe3fe0af2731688

  • SSDEEP

    3072:JsoAcUd9sdbAzZkjGLknNxZ1psqA+8y/ruUq4UvG73aLnLCYBaatQ:Jso+7sdXjkYNxZjH4y/rR73abMa+

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16636cac259e052b046e2d54cbbd870c_JaffaCakes118
    .rar
  • YanZheng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    70ef1f79f403825c00d73097d8ddf700


    Headers

    Imports

    Exports

    Sections