Overview

overview

7

Static

static

7

CF英雄�...��.exe

windows7-x64

7

CF英雄�...��.exe

windows10-2004-x64

7

CF英雄�...�.html

windows7-x64

3

CF英雄�...�.html

windows10-2004-x64

3

CF英雄�...�.html

windows7-x64

3

CF英雄�...�.html

windows10-2004-x64

3

使用说明.url

windows7-x64

1

使用说明.url

windows10-2004-x64

1

极速软�...��.url

windows7-x64

1

极速软�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce19fed529f45a1ae63ab90faa359222_JaffaCakes118

  • Size

    1.3MB

  • MD5

    ce19fed529f45a1ae63ab90faa359222

  • SHA1

    f264ecf9804d05b386ab9bb0e16c83a3a4281755

  • SHA256

    f4ced03cd96d5dac73c7af74a04e9a118dfa564a3cfd6dbd49985c851ae9fd34

  • SHA512

    0473b8b8ae621a83d8a22ea65ff1d0914c6814bc53584c04783114c8da894f4f4a6e5745fb66b31b6aa4af96fcc096a3923287c2caa28210e698673ffca0ec8d

  • SSDEEP

    24576:GCnhfWExMXu46lwaMe2zEzgi5TFilCgXv4FjIF7Kae2AdozlPZUebsnxxW:jfWElRh58ITFilpwFs7KlOyYsa

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ce19fed529f45a1ae63ab90faa359222_JaffaCakes118
    .rar
  • CF英雄武器兑换-内部版/CF英雄武器兑换-内部版.exe
    .exe windows:4 windows x86 arch:x86

    78212938b091ed8bcafa06e19ae24630


    Headers

    Imports

    Sections

  • CF英雄武器兑换-内部版/官方网站.html
    .html
  • CF英雄武器兑换-内部版/帐号充值（24小时值充）.html
    .html
  • CF英雄武器兑换-内部版/软件打不开怎么办.txt
  • CF英雄武器兑换-内部版/软件说明.txt
  • 使用说明.url
  • 极速软件下载.url
    .url