Overview

overview

7

Static

static

7

3dmgame.dll

windows7-x64

7

3dmgame.dll

windows10-2004-x64

7

侠盗猎�...��.exe

windows7-x64

7

侠盗猎�...��.exe

windows10-2004-x64

7

游侠网�...��.url

windows7-x64

1

游侠网�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f78e5b4f8280e2ca1d21a3beca44426_JaffaCakes118

  • Size

    565KB

  • MD5

    5f78e5b4f8280e2ca1d21a3beca44426

  • SHA1

    15b31aff65138cc7e658bc4db81c16e902c1b38a

  • SHA256

    ba45a3c3e9c78061041066907e96717bd869fdf5d9ae367091c883e85add0306

  • SHA512

    93ab8f20a18e41875319bd5556057710b403a56c6bdb5dac4b714a0e01cd317f24e73dbb867cfa997689c2bf55549a84a29e51cbd3be85b914c7d521b936c38c

  • SSDEEP

    12288:k+Oy4lBVjchy8jbyY1xrtGCHPh+xkkxvnjWlJqIE7qf9sYH45QOlXmL:DmVjIy8xxrtGacxH/jmJqIEy7Ol2L

Score
7/10
vmprotectupx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f78e5b4f8280e2ca1d21a3beca44426_JaffaCakes118
    .rar
  • 3dmgame.dll
    .dll windows:5 windows x64 arch:x64

    a1596826178a01b048344e844279f449


    Headers

    Imports

    Sections

  • 3dmgame.ini
  • ALI213.txt
  • 侠盗猎车手5 官方繁体中文注册表恢复工具.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 游侠网热门单机游戏.url
    .url
  • 进入游侠NETSHOW论坛热门游戏讨论区.website