Overview

overview

7

Static

static

7

LOL百思�...AT.exe

windows7-x64

7

LOL百思�...AT.exe

windows10-2004-x64

7

LOL百思�...CG.dll

windows7-x64

7

LOL百思�...CG.dll

windows10-2004-x64

1

LOL百思�...ib.dll

windows7-x64

7

LOL百思�...ib.dll

windows10-2004-x64

7

LOL百思�...��.url

windows7-x64

1

LOL百思�...��.url

windows10-2004-x64

1

LOL百思�...��.url

windows7-x64

1

LOL百思�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    65ff5f86ec5fe7dbcaf90b05c3e5c7a7_JaffaCakes118

  • Size

    3.2MB

  • MD5

    65ff5f86ec5fe7dbcaf90b05c3e5c7a7

  • SHA1

    63fa98f24db8c538a4faf102ffcb495fb579c9dc

  • SHA256

    4436fc32b00dbba7cfd575d82d987ece10e988773f6182a63c6e8f0be9c7937b

  • SHA512

    3ef181abf121fa9c3a9f90a17c779a3841d19096f2407457d84d61780da2e9f3dc0c727e7fb6aa1c8701e64d2778b3f96c20f63634498d45180b52c10475469b

  • SSDEEP

    49152:JPAjl5+/NWeVWjImi40+NhYfVT4rpBeuef0+5IGUuPc7+Zxy63rsIkE0EBXnguWH:JPAD+WeT40+fGVg3r5ucisjw+uWY/ub

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 65ff5f86ec5fe7dbcaf90b05c3e5c7a7_JaffaCakes118
    .rar
  • LOL百思防封工具12.15/AT.exe
    .exe windows:5 windows x86 arch:x86

    f96f2140541061cb1e03b538b3ab174f


    Headers

    Imports

    Sections

  • LOL百思防封工具12.15/CG.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • LOL百思防封工具12.15/zlib.dll
    .dll windows:4 windows x86 arch:x86

    cc434289b6eaac75c3339a4263587ca1


    Headers

    Imports

    Exports

    Sections

  • LOL百思防封工具12.15/下载说明.txt
  • LOL百思防封工具12.15/华彩联盟论坛.url
    .url
  • LOL百思防封工具12.15/华彩软件站-使用必读.url
    .url