Overview

overview

7

Static

static

7

网吧语�...��.exe

windows7-x64

7

网吧语�...��.exe

windows10-2004-x64

7

网吧语�...��.exe

windows7-x64

7

网吧语�...��.exe

windows10-2004-x64

7

网吧语�...��.exe

windows7-x64

3

网吧语�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7306b54bbeb7f64fa52ea73c0f784ebb_JaffaCakes118

  • Size

    8.0MB

  • MD5

    7306b54bbeb7f64fa52ea73c0f784ebb

  • SHA1

    f610767500792598783a11d94c1622ea4253add0

  • SHA256

    23eb8179bada04f17217d57fd86a2c9dcc020c51837219a4bade8fe66cf23ede

  • SHA512

    8dd1be31d74ca17cead5959532ff18a1a0310855d33ecb35c532a906372e1ba7d15789266f6f65d7ac51e92d4c2546e4029757ecdffde139822df42b6da0a787

  • SSDEEP

    196608:QlIerm8wmbudfo5Q4ccrTSOVPpUSfNJj0Hf9PO4KCJCVGn/j:QnrHlFcBOVPprJjCweCAnb

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 7306b54bbeb7f64fa52ea73c0f784ebb_JaffaCakes118
    .rar
  • 网吧语音呼叫网管V1.7/客户端/server.ini
  • 网吧语音呼叫网管V1.7/客户端/呼叫网管.exe
    .exe windows:4 windows x86 arch:x86

    d19c4a7aec1b63717d915aeb43e60de2


    Headers

    Imports

    Sections

  • 网吧语音呼叫网管V1.7/客户端/桌面图标.exe
    .exe windows:4 windows x86 arch:x86

    f375592bcc30890a015fdfae394d4109


    Headers

    Imports

    Sections

  • 网吧语音呼叫网管V1.7/服务端.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections