Overview

overview

9

Static

static

7

njtbmjzhcj...ch.exe

windows7-x64

7

njtbmjzhcj...ch.exe

windows10-2004-x64

7

njtbmjzhcj....4.exe

windows7-x64

9

njtbmjzhcj....4.exe

windows10-2004-x64

9

njtbmjzhcj...om.url

windows7-x64

1

njtbmjzhcj...om.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    94ff2d4b1a04aac38ea26effedc5dda4_JaffaCakes118

  • Size

    3.8MB

  • MD5

    94ff2d4b1a04aac38ea26effedc5dda4

  • SHA1

    91618bc88ad5e9060d8064f232824ff5efd5b2f5

  • SHA256

    585599a605c82bd1ec091c8eebad02d8d9554b200b6e86a32918b810def768bf

  • SHA512

    8e6dab8d886a5e96890024806126071f75ea4d83144614ea2c5bb66affc40fa0ad93665b74d53ef1f97c55bf4141f690384981bb55de9e67712af35d6ee4e4a6

  • SSDEEP

    98304:MkcJCDLQnjFv3jVkbnccVuzKnFCAfFFwUdY1EOgWK:MFeLSjR6bZVtbFGUrzWK

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 94ff2d4b1a04aac38ea26effedc5dda4_JaffaCakes118
    .rar
  • njtbmjzhcjtqjl/Patch.exe
    .exe windows:4 windows x86 arch:x86

    8ad70f3c19abc2514cfb99ce3b165456


    Headers

    Imports

    Sections

  • njtbmjzhcjtqjl/南极淘宝卖家账号采集提取精灵V5.4.exe
    .exe windows:5 windows x86 arch:x86

    06d90141d3fdab7f9e0de825e6c197f0


    Headers

    Imports

    Exports

    Sections

  • njtbmjzhcjtqjl/河源下载站-Xz7.com.url
    .url
  • njtbmjzhcjtqjl/破解说明.txt
  • njtbmjzhcjtqjl/软件报毒怎么办？.txt
  • njtbmjzhcjtqjl/软件简介.txt