Overview

overview

7

Static

static

7

vpn.exe

windows7-x64

vpn.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    39565fc5b93abc84b6105f820ca0533d_JaffaCakes118

  • Size

    41KB

  • MD5

    39565fc5b93abc84b6105f820ca0533d

  • SHA1

    62a976b024a75668ef08078f05323f072c5f8dbb

  • SHA256

    2e4d743ae9047fbf9199583b71f502f9d01f975ba3a5c2365540c90521cdb60f

  • SHA512

    daaef5cc43d3d3ddbcce37570fe242653a302b8f12823318e1a58ae7c22089c7c881ba0ae07c37406955ec2a8728fc7c0cd777319aa00dd1fcc8ff59a6ad86a0

  • SSDEEP

    768:3NQ6CQwFtNdrUIsMQgK1PaPJkQxbk33xcnUXeZmiMDOvffg7hwXovt730S:3NQ64tNdrUIF8PaGQxMohmovHKr730S

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39565fc5b93abc84b6105f820ca0533d_JaffaCakes118
    .rar
  • l2tp.reg
  • vpn.exe
    .exe windows:4 windows x86 arch:x86

    5540cdc950c14621598f6c7a7d8e9db2


    Headers

    Imports

    Sections

  • 使用说明.txt