Overview

overview

7

Static

static

7

后二计�...mp.exe

windows7-x64

7

后二计�...mp.exe

windows10-2004-x64

7

更多软�...��.url

windows7-x64

1

更多软�...��.url

windows10-2004-x64

1

飘荡软件.url

windows7-x64

1

飘荡软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7355537672fb881ce1ab6d0c73349877_JaffaCakes118

  • Size

    1.8MB

  • MD5

    7355537672fb881ce1ab6d0c73349877

  • SHA1

    f0d3c35552dd4331ca17561e7bfc0cf2622ead36

  • SHA256

    9a04fa25feb7341f69f1426f38305a0bde1d828862b7f6bad732b668a4b099a3

  • SHA512

    b3f562dff36e892ce25338118b870d5f3854f69273c978d0531ddcf0fc78a981d7ec04541ad8ce0cc1d1b77ebab84db33b47c0f21bb8a3b179438ffe1cb4b4d5

  • SSDEEP

    49152:t+llMEK27GO9pXDTSTFf6UpKO5hKcujrpZyd/Jd:Qom6QDOwUpKO5hKcujGdRd

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7355537672fb881ce1ab6d0c73349877_JaffaCakes118
    .rar
  • 后二计划工具_Mr.D_se.vmp.exe
    .exe windows:5 windows x86 arch:x86

    d61222b2ba8c610dcad4d5df7ba2c02e


    Headers

    Imports

    Sections

  • 更多软件下载.url
  • 飘荡软件.url
    .url