Overview

overview

7

Static

static

7

CFluoxue/�...cn.url

windows7-x64

1

CFluoxue/�...cn.url

windows10-2004-x64

1

CFluoxue/�...��.url

windows7-x64

1

CFluoxue/�...��.url

windows10-2004-x64

1

CFluoxue/�....0.exe

windows7-x64

7

CFluoxue/�....0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    780b90f00325cb47605a2c03b7d3ef56_JaffaCakes118

  • Size

    1.4MB

  • MD5

    780b90f00325cb47605a2c03b7d3ef56

  • SHA1

    a2b3d39783a8936cb0e94a7c17f9eacda2471549

  • SHA256

    8598751b7c842643ba0c892d7b3a7e19ae20bf4eb231ef734b942641f199fe8a

  • SHA512

    5a8a69ac2b99df08dd8c512a8b295c3d31e6e6d800c58198960be85949807135d5df62e8e450ef67458533ba0db6404ce18282be4c6733edcdfbb165ccc38395

  • SSDEEP

    24576:8K6fV2s3m5aT277pMRi5ECeXJWLKWKMQDiDKuQqebwqbTI70FB6fqEHMQ/c7sKWC:8KsLA7p9ECNLKWKfumaUXJBYz/c7sKdD

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 780b90f00325cb47605a2c03b7d3ef56_JaffaCakes118
    .rar
  • CFluoxue/河源下载站-cngr.cn.url
    .url
  • CFluoxue/淘宝热卖.url
    .url
  • CFluoxue/落雪加速1.5.0.exe
    .exe windows:4 windows x86 arch:x86

    a78f39e1db11add8014872d3eabebe83


    Headers

    Imports

    Sections