ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
General
-
Target
6f62387cdffdf8286964c805890321e9_JaffaCakes118
-
Size
2.8MB
-
MD5
6f62387cdffdf8286964c805890321e9
-
SHA1
8b45ade1ff21c49827e74202785197fb98483a92
-
SHA256
45302cf4b9f3a448beb323f359aa45a5ea5c0020c4c020b06c5dd60f426941a1
-
SHA512
cdd5deb413ae9c7eab4c09395842b8de7e1d81c522485f69fca3265ec2163ee95f2d456b12ad87e2f52587c45aa86546dc88af76a3dbb60a2dc4e8b5140528cc
-
SSDEEP
49152:PhK4x1r/FQ2wl+vohb3LTkzmJjLZjCRaBIbpgJuobeEOnbX7uzqHZXnR/:Phj7O2ZWb3LTkCJZjAaC9AuoKnnvHZXh
Score
7/10
Malware Config
Signatures
-
Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6f62387cdffdf8286964c805890321e9_JaffaCakes118
-
IPwaStory.bat
-
IPwaStory.exe
Headers
Exports
Sections