Overview

overview

7

Static

static

7

paul.dll

windows7-x64

7

paul.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0d48ce3230df4246cb9366256e65986_JaffaCakes118

  • Size

    428KB

  • MD5

    d0d48ce3230df4246cb9366256e65986

  • SHA1

    3d4d4f7880fa523d7def3226e240fc928d607eeb

  • SHA256

    90322780619487c9898c9a16e50ba5de7714635e7e222214a9f06feffa79eb89

  • SHA512

    ccba022491e06734ba84a27f5d2c4d2d238dae9ccc04ab8e2578a1606be55988b4de0eca6efb9f0226ec5a312277e1ead6a24e015626c864ae21bd9a10124c86

  • SSDEEP

    6144:xPrUcgU5LmW9dsYEBsromatY3yOFkjLJk11reDfsEbYqTFaVBLZyUbhhZ/nacD+0:xP4udEYK4zsJQkP+H6kEFM1yernYbB50

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0d48ce3230df4246cb9366256e65986_JaffaCakes118
    .rar
  • paul.dll
    .dll windows:5 windows x86 arch:x86

    484855496f2cb255de3f4baba6592e79


    Headers

    Imports

    Exports

    Sections

  • skidrow.nfo