Overview

overview

7

Static

static

7

ceb6121692...18.exe

windows7-x64

7

ceb6121692...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ceb6121692aab3b34d6098a9d1358c8c_JaffaCakes118

  • Size

    204KB

  • MD5

    ceb6121692aab3b34d6098a9d1358c8c

  • SHA1

    abfc18bf1c68f569f466e9f9ff749eba13a8a8cb

  • SHA256

    48f93af5eeee1377086a06bae0f84bf515d7fffc831ce5213446952bfa70306f

  • SHA512

    76dc20f4a23b24a139b8a7b54440c08da7c3b0c9dc06f0341f8734b27cab9a4eae65dc06f6a5fe8a934c3748aa14e78579d59908388b3be186294ea9a67326d2

  • SSDEEP

    3072:r0i29l6ed1gs0XYVAzCFs78vmtSXgHtl2m2CsGa3VJVW6hW:onXwJYVAgUtLHtl2m2CsGa3VJVdk

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ceb6121692aab3b34d6098a9d1358c8c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f025ef5988c2db21ebf5216384f89385


    Headers

    Imports

    Sections