Overview

overview

7

Static

static

7

CFyzwgSP61...��.url

windows7-x64

1

CFyzwgSP61...��.url

windows10-2004-x64

1

CFyzwgSP61...��.exe

windows7-x64

7

CFyzwgSP61...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1898b7ec07e1cdc844af1da354ab15cf_JaffaCakes118

  • Size

    2.1MB

  • MD5

    1898b7ec07e1cdc844af1da354ab15cf

  • SHA1

    03fd786fa79cecef90f695d994709969f033f25c

  • SHA256

    f6ed1a57eece0eb34d4a45cdd4bb058238a403fcdf8c27f172415188d35575cc

  • SHA512

    1a9ece98dd573101d64128ff1fe2e8b81586f07a8b4586b067c83006c65ae4cb64ad313ac3f35233cab3153de3cc45991aabac77a591666f5bb042e390e9c3a3

  • SSDEEP

    49152:zkwjuoWgwE3EdBXhPagUEti1lKubMV1Z3SDmTHZW5oA+dN4yfIXBV5:wwju9gP3Atv81lKubM1Si5i+nhIn5

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1898b7ec07e1cdc844af1da354ab15cf_JaffaCakes118
    .rar
  • CFyzwgSP613/155绿色软件站.url
    .url
  • CFyzwgSP613/影子CF辅助器.exe
    .exe windows:4 windows x86 arch:x86

    87c3021529c2ef78d85e72144e0ac533


    Headers

    Imports

    Sections

  • CFyzwgSP613/辅助器界面图.png
    .png