General

  • Target

    7113ec3296aeb4645e8781419838abff_JaffaCakes118

  • Size

    2.6MB

  • MD5

    7113ec3296aeb4645e8781419838abff

  • SHA1

    5233d4ec71fd16e8f0e2ce5f5f52640a080d686c

  • SHA256

    ce98d879dce7b117ab400eaf1b1f2fdc883d49fa67638613c4da58b1af582676

  • SHA512

    d1865bb18aa3ba3c57253bd94aa6d5d171866daed8aed7932c68047e0924525c231bdb32774cf57b9166e276f3bdbcc41122052fcb985a51dc47af216ac55dc8

  • SSDEEP

    49152:005F0aZLvi85GgeYXEvR5iqXmX61SNw5LwfV516nu0ZPBWfxtZO6:00g0i8EQg5iCmX6p50t+Ufx7O6

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7113ec3296aeb4645e8781419838abff_JaffaCakes118
    .rar
  • Titan短信轰炸机 0.6.4/Hook.dll
    .dll windows:4 windows x86 arch:x86

    bd3694cca18a81090dceacaaad4cfa39


    Headers

    Imports

    Exports

    Sections

  • Titan短信轰炸机 0.6.4/Titan_Save.ini
  • Titan短信轰炸机 0.6.4/Titan短信轰炸机 0.6.4.exe
    .exe windows:5 windows x86 arch:x86

    11b2dbd54d002f345bf6ff82ea3c3d9a


    Headers

    Imports

    Exports

    Sections

  • Titan短信轰炸机 0.6.4/更多软件下载.url
  • Titan短信轰炸机 0.6.4/飘荡软件.url
    .url