General

  • Target

    685e7a0b83cafc668a666d43588bc997_JaffaCakes118

  • Size

    10.5MB

  • MD5

    685e7a0b83cafc668a666d43588bc997

  • SHA1

    3a7ed0dbeef228251a2c286795a7244c53fc34dd

  • SHA256

    c24ab8395d07ca9e1aeb1f3a108764cbd1a2245bd30c57f4c26a2adbb00206d5

  • SHA512

    96f701067a6f5c4f152e7e5abd0f47eb1cc1066bcc29bdb547d682cf791a18bfabba8b9bdc14d296340c4f710596dbc945ec9e98a6f0bcce38bfe5ca39d2eac5

  • SSDEEP

    196608:7DaIRyPiOhSN8go+QZiPv25ezWpBg/d+qUv89wRQamNLp9ftYnK/T7olPK:nqPDhQ8g+W25eaped+qk6amBp9anK/f/

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 685e7a0b83cafc668a666d43588bc997_JaffaCakes118
    .rar
  • NIX_GLOBAL_UPDATE_1407_A/ITEMS_FILTER.exe
    .exe windows:6 windows x86 arch:x86

    fefe5ac1e3c1155c0e4067bbc086f59f


    Headers

    Imports

    Sections

  • NIX_GLOBAL_UPDATE_1407_A/NIX_ARAB_1407a.exe
    .exe windows:6 windows x64 arch:x64

    dccf1766c543aa44eab2d7f5ebf09a37


    Headers

    Imports

    Exports

    Sections

  • NIX_GLOBAL_UPDATE_1407_A/NIX_ENGLISH_1407a.exe
    .exe windows:6 windows x64 arch:x64

    dccf1766c543aa44eab2d7f5ebf09a37


    Headers

    Imports

    Exports

    Sections

  • NIX_GLOBAL_UPDATE_1407_A/SENSITIVITY.png
    .png
  • NIX_GLOBAL_UPDATE_1407_A/imgui.ini
  • NIX_GLOBAL_UPDATE_1407_A/items.ini