General

  • Target

    3a0a1af951cbe97ed31904ee8b9d43be_JaffaCakes118

  • Size

    2.0MB

  • MD5

    3a0a1af951cbe97ed31904ee8b9d43be

  • SHA1

    b6dccb85d89d7fe7eb52829da2ff13d601944ce7

  • SHA256

    b04eda764346274ca7508b2195916736d35dcd1363a961e78fc489986db497c1

  • SHA512

    7bb1bf23e9c074d7bda8ad62874f2d2362639f3d6165ab53dbbd7fa484aea7f2d99558cdadcd0aff9de6500e51d940a0756bfee1b37d5b8866f9fe6667ca74e0

  • SSDEEP

    49152:UFlg3KOcfBXZIU3jH+2ZqzSev9941tkx7asNgVDorM5dojt:UTga3XSU3jH4GevOtkxG+00Y5ajt

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a0a1af951cbe97ed31904ee8b9d43be_JaffaCakes118
    .rar
  • tcnew/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • tcnew/HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • tcnew/Q_tip.fne
    .dll windows:4 windows x86 arch:x86

    ac0fcb866885d84efa68731891fc3af3


    Headers

    Imports

    Exports

    Sections

  • tcnew/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • tcnew/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • tcnew/eDB.fne
    .dll windows:4 windows x86 arch:x86

    f857d1f0d4acc848a6aef5d66ff25e1a


    Headers

    Imports

    Exports

    Sections

  • tcnew/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • tcnew/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • tcnew/iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • tcnew/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • tcnew/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • tcnew/shdocvw.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6a7c629739ff264cef710604b9d77a86


    Headers

    Imports

    Exports

    Sections

  • tcnew/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • tcnew/ttssc.mdb
  • tcnew/天彩助手.vmp.exe
    .exe windows:4 windows x86 arch:x86

    dc8611d06568323a54dc7ccd3cb335f3


    Headers

    Imports

    Exports

    Sections