General

  • Target

    2fda5c3ceec5672af11ef4e18f502334_JaffaCakes118

  • Size

    2.0MB

  • MD5

    2fda5c3ceec5672af11ef4e18f502334

  • SHA1

    c5eb725f4feae3914c0e962d345b5f8194be7415

  • SHA256

    6baa51da775f898b0cd03372be44ea4aa4355ac31c473d92f718b189c2e7b3f5

  • SHA512

    f582c40a9b485bfa200738afd2105b992d9abc102a2d53affcae9650ed485df028629f9199eefe48b8dce517b90016b342d3fb81cb5e1017a8f15528a383250d

  • SSDEEP

    49152:8IABIG10FuGk6ksbgRyIgziKJMyCI2fMkm:4Ka0oGJksstIiKJRCFJm

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fda5c3ceec5672af11ef4e18f502334_JaffaCakes118
    .rar
  • Valkyrie.exe
    .exe windows:4 windows x86 arch:x86

    738e9e64c7766d8ae77684d13c1e3078


    Headers

    Imports

    Exports

    Sections

  • Valkyrie.ini
  • WallHack.dll
    .dll windows:5 windows x86 arch:x86

    53f66559ca03f06e523cafb42c6a5264


    Headers

    Imports

    Exports

    Sections

  • x64/msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/msvcr100d.dll
    .dll windows:5 windows x64 arch:x64

    9ecbcc46a217f3df1e2cfb823e61b510


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/msvcr100d.dll
    .dll windows:5 windows x86 arch:x86

    0dc7b0e0b0a7b26ca080f7c56e8c0b34


    Code Sign

    Headers

    Imports

    Exports

    Sections