Overview

overview

7

Static

static

7

CF落雪�...��.url

windows7-x64

1

CF落雪�...��.url

windows10-2004-x64

1

CF落雪�....5.exe

windows7-x64

7

CF落雪�....5.exe

windows10-2004-x64

7

CF落雪�....5.exe

windows7-x64

7

CF落雪�....5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    79a3e921ac530c723273b1096ba5a069_JaffaCakes118

  • Size

    1.7MB

  • MD5

    79a3e921ac530c723273b1096ba5a069

  • SHA1

    9ba58a982b5918208ce94a0dc01b50da9a142980

  • SHA256

    005eb3e7d2b5ec15891f83615751096f706e5e17a503b729a80edadf6e86632f

  • SHA512

    ed49fc96109252ccaeefdb5145573d7c7d99130fe896e79e1477ad8336f0dfe2b21958c0fbf86b2c78837e21283402d4648710c62fc652fb9b6897bd2c0041a2

  • SSDEEP

    49152:3638AE0jXKEdgsJ18qWMiWwdpYB18n1Rz8ss6E7A2jhYp:3yB6ESsH8VMNwdpI1HD6p

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 79a3e921ac530c723273b1096ba5a069_JaffaCakes118
    .rar
  • CF落雪游戏加速器 1.8.5绿色版/使用说明.txt
  • CF落雪游戏加速器 1.8.5绿色版/绿软基地.url
    .url
  • CF落雪游戏加速器 1.8.5绿色版/落雪游戏加速器V1.8.5.exe
    .exe windows:4 windows x86 arch:x86

    200fc8bb878c5f9ed751f99ecf081ac0


    Headers

    Imports

    Sections

  • CF落雪游戏加速器 1.8.5绿色版/落雪游戏加速器驱动版V1.8.5.exe
    .exe windows:4 windows x86 arch:x86

    a779fcc3ba0e24c587fb1abed849d438


    Headers

    Imports

    Sections