Overview

overview

7

Static

static

7

龙天辅�...lt.exe

windows7-x64

7

龙天辅�...lt.exe

windows10-2004-x64

7

龙天辅�...r2.exe

windows7-x64

7

龙天辅�...r2.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8592a08b271d4ffea4f5d78cf7ae147c_JaffaCakes118

  • Size

    9.3MB

  • MD5

    8592a08b271d4ffea4f5d78cf7ae147c

  • SHA1

    92a5bd42a0a9c4a791b79514c8323259a5df6afa

  • SHA256

    28532092fa78a1686037b575e651e22e29e615d00f63aba63107490cb8028fb6

  • SHA512

    0687680695fa7cf105fe571cf29c0232f7caa32bce9e016c623c286d8345dc14bae22f26f4a1d089c70a444f172ae384932cbd8064f58e4312daaa864622fc1e

  • SSDEEP

    196608:4M1giCs7kZFgVQiYddU33ie18VQ6FMqsC50wx6s1O:OiC8kZFgVQiIu335iWAh0g6eO

Score
7/10
upxvmprotect

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 8592a08b271d4ffea4f5d78cf7ae147c_JaffaCakes118
    .rar
  • 龙天辅助免费版/lt.dat
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 龙天辅助免费版/mir2.dat
    .exe windows:5 windows x86 arch:x86

    2698a05f2079022ef86b916087a081e0


    Headers

    Imports

    Sections

  • 龙天辅助免费版/反外挂登录器开法.txt