Overview

overview

7

Static

static

7

885986ac9a...18.exe

windows7-x64

7

885986ac9a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    885986ac9ac972b45fa6feaa709c1412_JaffaCakes118

  • Size

    748KB

  • Sample

    240811-a63xga1ekc

  • MD5

    885986ac9ac972b45fa6feaa709c1412

  • SHA1

    331ba6465d9927847b4a860e6d10b2bd7be885b2

  • SHA256

    d1de9ea427c2048f18ad303bce65043b301574fa9b30914da9c978e6be81b834

  • SHA512

    d952769dbb417d5b4fcaf6ed62a8ec9176ca7c189daadc89d961572e702db5a687bad2a97e2527aadf5b3a7bd1a1f0589d1bdcc70b65fc635860aac7fdd94288

  • SSDEEP

    12288:9el0P3zSwiScH5gLxQFslpmO6OBEa4z21bt1BHgcL4/89MWq4RbxYd3sGgvzh+Rg:rs5SDg3z2JtXd4/+rq4Ru5sGKkTi

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      885986ac9ac972b45fa6feaa709c1412_JaffaCakes118

    • Size

      748KB

    • MD5

      885986ac9ac972b45fa6feaa709c1412

    • SHA1

      331ba6465d9927847b4a860e6d10b2bd7be885b2

    • SHA256

      d1de9ea427c2048f18ad303bce65043b301574fa9b30914da9c978e6be81b834

    • SHA512

      d952769dbb417d5b4fcaf6ed62a8ec9176ca7c189daadc89d961572e702db5a687bad2a97e2527aadf5b3a7bd1a1f0589d1bdcc70b65fc635860aac7fdd94288

    • SSDEEP

      12288:9el0P3zSwiScH5gLxQFslpmO6OBEa4z21bt1BHgcL4/89MWq4RbxYd3sGgvzh+Rg:rs5SDg3z2JtXd4/+rq4Ru5sGKkTi

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks