General

  • Target

    aa962df38235a8ddcf48c20544625f40_JaffaCakes118

  • Size

    175KB

  • MD5

    aa962df38235a8ddcf48c20544625f40

  • SHA1

    830394d2a740fc48245425dc5fe62f1190c5e7b3

  • SHA256

    569c772fa6a47b1c0b7622a6b2ed9f429e9bdbbe149384f6ab30e3003d98bbe6

  • SHA512

    9748f212131ccbc305b69233a1a71e6829e97f2a0dccffe7bd2058ae141b51ebf27917e3924cf6c169ddc2a6e1a47d1af3402a02ae961d42f9ab3dc9d3592960

  • SSDEEP

    3072:vI2jEWLtBqekusts1oSI0M0TqDhQSHPW91+REe+DxFk8NLAYeg8VYWOeaJD/Xe8T:vDnpkustWo5taqVw/DxFk8NIaWOXD/XW

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa962df38235a8ddcf48c20544625f40_JaffaCakes118
    .sys windows:5 windows x86 arch:x86

    2815a26316831738d3675416954567f9


    Headers

    Imports

    Sections