Overview

overview

10

Static

static

7

6ebd3ead7f...18.dll

windows7-x64

10

6ebd3ead7f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ebd3ead7ff70ff9badedb980b66728a_JaffaCakes118

  • Size

    3.4MB

  • MD5

    6ebd3ead7ff70ff9badedb980b66728a

  • SHA1

    151afd9f5352fd31fdee9af8b1cfa00afd36dd49

  • SHA256

    02de6c38c553ade4460d627cdcd4db065ee9a59bc0a19d0b6f0b04ecdf38be80

  • SHA512

    df4b54808fd4deb144ea1c6eb058d531013d2b2aebbe69b9c72246192874b02924a9d9fd84f4f2d27207021c5075d8949ab3e69926224fac2dc96f271536db85

  • SSDEEP

    49152:/e1ZAtJAL8bFZlq6MNa0fpfZJRU+U18Kh0sLRUZQlJ9xLOs3lHqZbo5nzfn8Lknb:/Cz8bztMNTU+sj0WRUYv3xqJk71eg

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ebd3ead7ff70ff9badedb980b66728a_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86

    3ac8c157d72a609c4bab6e6617a9650a


    Headers

    Imports

    Exports

    Sections