Overview

overview

7

Static

static

7

pc/paul.dll

windows7-x64

7

pc/paul.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3777e8c5ea0e26d1ebb8a0cefad729ed_JaffaCakes118

  • Size

    70KB

  • MD5

    3777e8c5ea0e26d1ebb8a0cefad729ed

  • SHA1

    25fcb4945180af71978d6fb12d2effeebfd26b57

  • SHA256

    33460e443a002d22c1b21bbef57e853a4105e09203504a9aec657ad0725525fa

  • SHA512

    c70df41cd16781badcdb90d218bd800eef20762cf7dd219f485c3786cdb9f050f91303827534dc2929c23219f61ada0e91a0662e33e83229e516540fb4f1487c

  • SSDEEP

    768:7n2DP6zSLEjJjt5EkeTA43xBv2vv4Ew98/Qf8h/vIepq9jhhaar2y/LI0Itv4bNF:bBSW/UTVSYEk0/A/1haA5LPIEN4cqGmy

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3777e8c5ea0e26d1ebb8a0cefad729ed_JaffaCakes118
    .rar
  • pc/paul.dll
    .dll windows:4 windows x86 arch:x86

    72b4b1ae30f1d63e390e6287d6d8c70d


    Headers

    Imports

    Exports

    Sections