Overview

overview

7

Static

static

7

9553下载站.url

windows7-x64

1

9553下载站.url

windows10-2004-x64

1

TM-梦幻Q...��.wps

windows7-x64

4

TM-梦幻Q...��.wps

windows10-2004-x64

3

admin/htm.exe

windows7-x64

3

admin/htm.exe

windows10-2004-x64

3

reg.bat

windows7-x64

1

reg.bat

windows10-2004-x64

1

sydt.dll

windows7-x64

1

sydt.dll

windows10-2004-x64

1

仓库收钱1.exe

windows7-x64

7

仓库收钱1.exe

windows10-2004-x64

7

梦幻Q仙-TM.exe

windows7-x64

7

梦幻Q仙-TM.exe

windows10-2004-x64

7

游戏攻�...��.url

windows7-x64

1

游戏攻�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    79b9e77fd864f201cf2ed20478b110ba_JaffaCakes118

  • Size

    2.9MB

  • MD5

    79b9e77fd864f201cf2ed20478b110ba

  • SHA1

    f3025506de6a8d9a5d82edc24bc39b977383c31f

  • SHA256

    7b62c066839a4039e1f060ddaf4dab82c97e2c478f3794f7a3789395af4dddc6

  • SHA512

    fe3e0befe830887cb1bfbe4858fb2e38a765a34ad2fe4f33da76154ce2496d903476618cafa7f223ad64bbab10c25a435ae459df08b8193202e1465402668524

  • SSDEEP

    49152:rpHRgPSVWt7c3FVXc5rsp+j2JmP9FhBkjA/vA8RIR21YtfNSYU8vKq4C6W:dHRgE1FVybPQMYBNdvy+

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 79b9e77fd864f201cf2ed20478b110ba_JaffaCakes118
    .rar
  • 9553下载站.url
    .url
  • TM-梦幻Q仙使用说明.wps
    .wps .doc windows office2003
  • admin/dm_soft.txt
  • admin/htm.exe
    .exe windows:4 windows x86 arch:x86

    c94ecc80ac216c3ab3b624bdb1d24cea


    Headers

    Imports

    Sections

  • admin/交.bmp
  • admin/仙符.bmp
  • admin/任.bmp
  • admin/修真.bmp
  • admin/兑.bmp
  • admin/关.bmp
  • admin/关闭.bmp
  • admin/升.bmp
  • admin/即.bmp
  • admin/友.bmp
  • admin/取.bmp
  • admin/回城.bmp
  • admin/地图.bmp
  • admin/培.bmp
  • admin/境1.bmp
  • admin/境界.bmp
  • admin/好友.bmp
  • admin/家族.bmp
  • admin/屏.bmp
  • admin/建号.bmp
  • admin/强.bmp
  • admin/承.bmp
  • admin/技能.bmp
  • admin/挖矿.bmp
  • admin/接.bmp
  • admin/提.bmp
  • admin/明.bmp
  • admin/法宝.bmp
  • admin/活动.bmp
  • admin/添.bmp
  • admin/激.bmp
  • admin/激活.bmp
  • admin/灵兽.bmp
  • admin/确.bmp
  • admin/祭.bmp
  • admin/祭练.bmp
  • admin/竹.bmp
  • admin/级.bmp
  • admin/练制.bmp
  • admin/花.bmp
  • admin/花1.bmp
  • admin/蛋.bmp
  • admin/融.bmp
  • admin/请.bmp
  • admin/进.bmp
  • admin/部.bmp
  • admin/部1.bmp
  • admin/钩鱼.bmp
  • admin/锁.bmp
  • admin/锻造.bmp
  • admin/音.bmp
  • reg.bat
  • sydt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9543722c79f71195779403cfc82b2ab9


    Headers

    Imports

    Exports

    Sections

  • 仓库号使用说明.txt
  • 仓库收钱1.exe
    .exe windows:4 windows x86 arch:x86

    db0c76ae89ff8c4b2960874d9b2401fa


    Headers

    Imports

    Sections

  • 利润分析.txt
  • 区服.txt
  • 梦幻Q仙-TM.exe
    .exe windows:4 windows x86 arch:x86

    cfa5c3272f81af53157596d350e1fd30


    Headers

    Imports

    Exports

    Sections

  • 游戏攻略教程 - 9553资讯.url
    .url
  • 账号.txt
  • 验证截图.jpg
    .gif