General

  • Target

    7d255043dbf4114da04b2fbc97af4b2e_JaffaCakes118

  • Size

    7.6MB

  • MD5

    7d255043dbf4114da04b2fbc97af4b2e

  • SHA1

    da4d7ff8a9c2a7a4125f780d5a5566983f8c0f0b

  • SHA256

    74bd39c586d9d7672a21c57d634a2fa8285e8f853585162e6936bde4495e8be7

  • SHA512

    1f4aeab743bd048d3a62a155ab842017ed856abe40e654464efa32b068730ad095c5d936fd6cbce535c7c4d415e4e9521d25973f55016bf281cf200b24a302dc

  • SSDEEP

    196608:BAJLK4B9z7jI6pytQhw3SxrV+tyyKNoMhFLalILwB:BANK437jIjA5TVWlxB

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d255043dbf4114da04b2fbc97af4b2e_JaffaCakes118
    .rar
  • H1Z1_透视免费版/H1Z1.qy
    .dll windows:4 windows x86 arch:x86

    d14b99d3f435db17cf62e2399f5190a8


    Headers

    Imports

    Exports

    Sections

  • H1Z1_透视免费版/H1Z1_hack.qy
    .exe windows:6 windows x64 arch:x64

    a4f0f519da4bb7867eb0944db4a203ce


    Headers

    Imports

    Sections

  • H1Z1_透视免费版/H1Z1_透视免费版.exe
    .exe windows:5 windows x86 arch:x86

    3a4fa7d55454ecd5e98aea7198a8cad4


    Headers

    Imports

    Exports

    Sections