Overview

overview

7

Static

static

7

WPE吾爱�...��.exe

windows7-x64

7

WPE吾爱�...��.exe

windows10-2004-x64

7

WpeSpy.dll

windows7-x64

1

WpeSpy.dll

windows10-2004-x64

1

更多软�...��.url

windows7-x64

1

更多软�...��.url

windows10-2004-x64

1

飘荡软件.url

windows7-x64

1

飘荡软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9a51c56a9559b6dce60da2ec2fbb3e95_JaffaCakes118

  • Size

    402KB

  • MD5

    9a51c56a9559b6dce60da2ec2fbb3e95

  • SHA1

    6550950742112e662aad332262360f420528f36f

  • SHA256

    21db45aaa6ae7918ec68ab30ab860babbb9fa17a8f1f881571fea518c56dc881

  • SHA512

    14cd2c54df0d581b82a0db6d4ce8ca91631b567acbd18b95d506a9ada29c7be87164a3e307f8d16e24cd7749755898290d7326649be4d57c475a8f1bb00a7a5d

  • SSDEEP

    12288:i6KZ2SxJSpucGBH/Bo0Derf502L7vD593kR0yYhMEK:dK3JAucGBfBz6DuOPbthJK

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a51c56a9559b6dce60da2ec2fbb3e95_JaffaCakes118
    .rar
  • WPE吾爱专用版.exe
    .exe windows:4 windows x86 arch:x86

    1efa240098bb6a65ab074520c9cd011f


    Headers

    Imports

    Sections

  • WpeSpy.dll
    .dll windows:4 windows x86 arch:x86

    c8bf43826d3943b2eea961ec88d9c3f0


    Headers

    Imports

    Exports

    Sections

  • 更多软件下载.url
  • 飘荡软件.url
    .url