Resubmissions

28-06-2024 11:41

240628-ntldjszgmq 10

28-06-2024 06:30

240628-g9vtlayblr 10

General

  • Target

    191f0a5dd7622595d3d38decf8061c05_JaffaCakes118

  • Size

    3.0MB

  • MD5

    191f0a5dd7622595d3d38decf8061c05

  • SHA1

    bded0a27fd4b759642720f8fbd4470a168f75576

  • SHA256

    e7636efbaf3e170af8f7cbc36f4c030f3df0bc89547186ddfe03e66a5c8c0b92

  • SHA512

    a1d2f5b4055c705f4e6f0394ff8b10127c8802d96e87722a34a6eaa0968d34853a9279de497d837c8b45c439e763bb2a65f4207c7e9db1a1165cbc99c96fa952

  • SSDEEP

    49152:EBKs6yFyQqn4ZvgZ3aj+wvLoK/DVcONC/LzUX0QrxwyrIrP1VRmmnsQYp:EB36Sy94y3ajroKbCDoWPRT

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 191f0a5dd7622595d3d38decf8061c05_JaffaCakes118
    .dll regsvr32 windows:6 windows x64 arch:x64

    3de301e08dd1ae399d773905af5ee028


    Headers

    Imports

    Exports

    Sections