Overview

overview

7

Static

static

7

76fb37d5f0...18.exe

windows7-x64

7

76fb37d5f0...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76fb37d5f05b7cf1ac8d2c1446a08eb4_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240526-19z8vseb5w

  • MD5

    76fb37d5f05b7cf1ac8d2c1446a08eb4

  • SHA1

    8364cfefd9312722956f485b7e13e940b4e11e42

  • SHA256

    c10c762dd123d807d058ea2f3531b00877d24fb9e3aa7bc9abd12410fc996989

  • SHA512

    b37bb5b51344d27f5125e29d3c98a2a78484a7613eec40061dc0c978d9b514385a6c472ebe47817fbc2a65cf2a079a56e9723cd5b4d09a11d3cbb7cac9f0dfbe

  • SSDEEP

    49152:6VOkF9dhcZtCj2sawmjAJwjdxaHMPtSTIaxEk+lCYpT4:JkFOZtCj28mjAGGHWaxU

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      76fb37d5f05b7cf1ac8d2c1446a08eb4_JaffaCakes118

    • Size

      2.0MB

    • MD5

      76fb37d5f05b7cf1ac8d2c1446a08eb4

    • SHA1

      8364cfefd9312722956f485b7e13e940b4e11e42

    • SHA256

      c10c762dd123d807d058ea2f3531b00877d24fb9e3aa7bc9abd12410fc996989

    • SHA512

      b37bb5b51344d27f5125e29d3c98a2a78484a7613eec40061dc0c978d9b514385a6c472ebe47817fbc2a65cf2a079a56e9723cd5b4d09a11d3cbb7cac9f0dfbe

    • SSDEEP

      49152:6VOkF9dhcZtCj2sawmjAJwjdxaHMPtSTIaxEk+lCYpT4:JkFOZtCj28mjAGGHWaxU

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks