General

  • Target

    20ef14eb75a0508223f068e2f889acbe_JaffaCakes118

  • Size

    373KB

  • MD5

    20ef14eb75a0508223f068e2f889acbe

  • SHA1

    1e5024fe41b6b5e22584a77fc7d8e77e8ee1c7de

  • SHA256

    1409140fa7cff2707230278685e1801b6dfd29dce24a1736672b45710245dce3

  • SHA512

    ca0ae1d9ced52940007c1c45fa997297d3d149570abe10c212e1b5dd422de71208fd3bf874432cc61459df4ec01df959830ebc28627c1816667344655a62b91c

  • SSDEEP

    6144:A4VYuSm7V61qtn/N61SLLyRzR7NxH6CtDJRxF37ksDb5SwSw7bYJ1Nvic8DaTJrg:tYu3AMM1SHozRHH9DJVYY5SwCJPAadrg

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 20ef14eb75a0508223f068e2f889acbe_JaffaCakes118
    .rar
  • here iS the code.txt
  • zs.exe
    .exe windows:4 windows x86 arch:x86

    1b1ca09774dbc5d4894057aaf7124fcc


    Headers

    Imports

    Exports

    Sections

  • zsLib.dll
    .dll windows:4 windows x86 arch:x86

    9e4340a9524ff9b2b466b0b82bf7932f


    Headers

    Imports

    Exports

    Sections