Overview

overview

8

Static

static

7

pkl5.0part4.exe

windows7-x64

8

pkl5.0part4.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1730baab7ec7751199b2f487272680d_JaffaCakes118

  • Size

    862KB

  • MD5

    a1730baab7ec7751199b2f487272680d

  • SHA1

    3a596e520b105b53d8f99e53ebe8d73291e2c540

  • SHA256

    8553c59cbbd601777f6c9d92715006be6fc6641e173182ca78bf692e0415209f

  • SHA512

    38412724cb03b460a185287a413d5d9f906825408eef7d439d5116fc9b503cf5f04b213b0916b3a8d1d4ce69623571bdb6d4cbc5a4f99c0a48c50815aca3be38

  • SSDEEP

    12288:CEjEng59ldTqcYuBP3bnUmM5hjkn6CTkcYm3H6+MmIFDfaUT7qjVq1V/w:CcnTqcXF3bnU/jk6CTqmqvFDiUqBqLw

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1730baab7ec7751199b2f487272680d_JaffaCakes118
    .rar
  • Hotkey Update.jpg
    .jpg
  • ReamMePlease!.txt
  • pkl5.0part4.exe
    .exe windows:4 windows x86 arch:x86

    f620dd536651dbd070fc1960864faccc


    Headers

    Imports

    Sections