Overview

overview

7

Static

static

7

weiniqx/�...��.exe

windows7-x64

7

weiniqx/�...��.exe

windows10-2004-x64

7

weiniqx/�...��.exe

windows7-x64

7

weiniqx/�...��.exe

windows10-2004-x64

7

weiniqx/�...om.url

windows7-x64

1

weiniqx/�...om.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9279e017afd4dbc7cf4292291a80f7a_JaffaCakes118

  • Size

    6.5MB

  • MD5

    a9279e017afd4dbc7cf4292291a80f7a

  • SHA1

    d12180eab39df0f9dfe984da353f8de09b1d3130

  • SHA256

    be82b479229f6d480319b7d2be81b15262975b34a5ed155feb7db8079d514824

  • SHA512

    bdda23a93f93fa9478da3fd8d66b88520977504047621efbba8017b9fa46657a91a4a7a0e6d62100ab0e6d2dab84277c817f12273713ba7bc1044da345bdad55

  • SSDEEP

    196608:R3xx1nlxxNxhmHU/VLxpBcVT7ZU46Ui4JX1:R3xxPhmH4QTJl

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a9279e017afd4dbc7cf4292291a80f7a_JaffaCakes118
    .rar
  • weiniqx/为你倾心 软件内容编辑器.exe
    .exe windows:5 windows x86 arch:x86

    c98cbebedf85f367e1b641911cc50da4


    Headers

    Imports

    Sections

  • weiniqx/为你倾心.exe
    .exe windows:5 windows x86 arch:x86

    e7ff58bbe3e4c635a8c950e1a90d030d


    Headers

    Imports

    Sections

  • weiniqx/为你倾心bin/1.txt
  • weiniqx/为你倾心bin/1f.txt
  • weiniqx/为你倾心bin/1t.txt
  • weiniqx/为你倾心bin/2.txt
  • weiniqx/为你倾心bin/2f.txt
  • weiniqx/为你倾心bin/2t.txt
  • weiniqx/为你倾心bin/3.txt
  • weiniqx/为你倾心bin/3f.txt
  • weiniqx/为你倾心bin/3t.txt
  • weiniqx/为你倾心bin/4f.txt
  • weiniqx/为你倾心bin/4t.txt
  • weiniqx/为你倾心bin/5f.txt
  • weiniqx/为你倾心bin/5t.txt
  • weiniqx/为你倾心bin/6f.txt
  • weiniqx/为你倾心bin/6t.txt
  • weiniqx/为你倾心bin/7f.txt
  • weiniqx/为你倾心bin/7t.txt
  • weiniqx/为你倾心bin/A.ini
  • weiniqx/为你倾心bin/y.txt
  • weiniqx/为你倾心bin/y1.txt
  • weiniqx/为你倾心音乐/1.mp3
  • weiniqx/使用教程.txt
  • weiniqx/报毒请看.txt
  • weiniqx/河源下载站-Xz7.com.url
    .url