General

  • Target

    b4fa5ee69ef7fb591794a186e4bfcbd2_JaffaCakes118

  • Size

    162KB

  • MD5

    b4fa5ee69ef7fb591794a186e4bfcbd2

  • SHA1

    eb135ae3d92418200b7d0654e4bcf5066df3d2cf

  • SHA256

    408c8a0464649b2d364bb7b9dafa9ad67fc6c6d7eaf0cdf46ecf7e0c01dc3532

  • SHA512

    e923c8f392801ecd10351c6689f981e1241d7ecbbead411fec94658dec4d3739867edf159f779a70fef53de55071a85cc74d34d4e24e7639db3b9997f620d8ee

  • SSDEEP

    3072:Z8zPMaqj/0xDPvT93czfVLe8FdCKPXLL9N5npokMWx7APGod5eaCXq:Z8jMbwJ3cNe8/txnpo4FA7dhCX

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4fa5ee69ef7fb591794a186e4bfcbd2_JaffaCakes118
    .sys windows:5 windows x86 arch:x86

    8f0e3412e9aba24a308c5a6481b13cd1


    Headers

    Imports

    Sections