General

  • Target

    85ab55536465a175a1c5377f1f31d0ac_JaffaCakes118

  • Size

    8.6MB

  • MD5

    85ab55536465a175a1c5377f1f31d0ac

  • SHA1

    9c7e4f4eb5a79a97ce34786e73ebe6fccb8be4f2

  • SHA256

    4515510b8eae39f2650bfb2cd515af086ffd3951aac2988da4580aefced8da3d

  • SHA512

    8e23d65d3b4d51d54d7aeaad4fa39a433f6da60edc5c18444ca803d09740329eac03ee979f8fac61f6192534e9973dd5efb6546fac60352239ca0acb64e0df78

  • SSDEEP

    196608:XpqYGxYn27oQs1GTwPLebivbvE2euzQYQgJVDTCN46SOD9x57Nki:5p5nlswsUEYQKZo/SOD9f7Si

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 85ab55536465a175a1c5377f1f31d0ac_JaffaCakes118
    .rar
  • Configure.ini
  • Function/carousel.dll
    .dll windows:4 windows x86 arch:x86

    8df270fb8a9363ae1d34877371aa2114


    Headers

    Imports

    Exports

    Sections

  • Function/full.dll
    .dll windows:4 windows x86 arch:x86

    9ec31fe652eebfdf7a781ab1d7ce0637


    Headers

    Imports

    Exports

    Sections

  • Function/lattice.dll
    .dll windows:4 windows x86 arch:x86

    bf64c97f947e952d545288610c01ad38


    Headers

    Imports

    Exports

    Sections

  • Function/other.dll
    .dll windows:4 windows x86 arch:x86

    c00c0637c348e28408d2d8c2ce16cd22


    Headers

    Imports

    Exports

    Sections

  • Function/tools.dll
    .dll windows:4 windows x86 arch:x86

    700b256adf2464d7f0f31596accdf4a2


    Headers

    Imports

    Exports

    Sections

  • update.exe
    .exe windows:4 windows x86 arch:x86

    5c55994eed0f72f5f16c314a97329df0


    Headers

    Imports

    Sections

  • 天猫美工王.exe
    .exe windows:4 windows x86 arch:x86

    f2aa36aa79a8d45ba8db872b9c716ccd


    Headers

    Imports

    Exports

    Sections

  • 更新日志.txt
  • 河源下载站-cngr.cn.url
    .url
  • 淘宝热卖.url
    .url