Overview

overview

7

Static

static

7

banlv/context.dll

windows7-x64

7

banlv/context.dll

windows10-2004-x64

7

banlv/倚�...��.exe

windows7-x64

7

banlv/倚�...��.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76e70ddcdb7d46996a9675d6f53a0636_JaffaCakes118

  • Size

    1.1MB

  • MD5

    76e70ddcdb7d46996a9675d6f53a0636

  • SHA1

    9ceabba111663d3943d8f5713e54f97f47b378fa

  • SHA256

    b80a4de9ce847c9837d2af46c7f2e0c5837ed6157bc6fd5138b02f4b6a5b2243

  • SHA512

    a892cef573943975dbb4f6beee12e703aa1659a6fb8123bf3bce464297ea36ed8244689592b231078cde6cc2d83c8e268e2e56869f682f4e51b6b96643fb41b4

  • SSDEEP

    24576:qbyt6q+0a8eouzxT11JqvcrXkaW7omxqZDL6CUM+ZH8zIbvD:U8o0NetzxTJqUrXkFoI+fdx+ZczyvD

Score
7/10
vmprotectupx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 76e70ddcdb7d46996a9675d6f53a0636_JaffaCakes118
    .rar
  • banlv/config.ini
  • banlv/context.dll
    .dll windows:4 windows x86 arch:x86

    1d3aaae5c223bc8cb1c1516efa58d4ce


    Headers

    Imports

    Exports

    Sections

  • banlv/readme.txt
  • banlv/倚天伴侣.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • banlv/配置/一键烤鱼列表.txt
  • banlv/配置/卖活鱼列表.txt
  • banlv/配置/合鱼列表.txt
  • banlv/配置/开鱼列表.txt
  • banlv/配置/扔死鱼列表.txt
  • banlv/配置/攻速药.txt
  • banlv/配置/整理物品列表.txt
  • banlv/配置/杂货店员列表.txt
  • banlv/配置/神药.txt
  • banlv/配置/红药.txt
  • banlv/配置/蓝药.txt
  • banlv/配置/解毒药.txt
  • banlv/配置/跑速药.txt
  • banlv/配置/防御药.txt