Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

DNF刺客4.7.exe

windows7-x64

7

DNF刺客4.7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    018455878ac165fc8f406ca57591f00f_JaffaCakes118

  • Size

    4.4MB

  • MD5

    018455878ac165fc8f406ca57591f00f

  • SHA1

    ac541d51245296526e7af6b99a67233c96383a34

  • SHA256

    4102ccb2344551d3d1888a3372ecabf4f14bf13605b8d4ba411b0df00d6851c4

  • SHA512

    6cb25aa16eb20851d3cad1df3f28b5d6803237993b9dfef7a7df97c0cc8350f99f8b90c0e7cc4dbb560cd2754b8a58b178dc28e7bbf6b812e5e7f5434bfafe8b

  • SSDEEP

    98304:+CLUPFYiuJybk+EbfJ1DJfmXDy+Y785DE9JjuVkVFwp+7Ac+ELBgX:+JPCJyLEDJdJODyb7GE9qknwp+7AcRe

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 018455878ac165fc8f406ca57591f00f_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • DNF刺客4.7.exe
    .exe windows:4 windows x86 arch:x86

    768e90672130a02dec943978465eb053


    Headers

    Imports

    Sections

  • DNF刺客使用说明.txt