Overview

overview

7

Static

static

7

1元租用...��.url

windows7-x64

1

1元租用...��.url

windows10-2004-x64

1

前去寻�...��.url

windows7-x64

1

前去寻�...��.url

windows10-2004-x64

1

小刀防C...��.url

windows7-x64

1

小刀防C...��.url

windows10-2004-x64

1

帐号获取.exe

windows7-x64

7

帐号获取.exe

windows10-2004-x64

7

超级卡�...��.url

windows7-x64

1

超级卡�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d534d4ada4b56d35bbaed72779e84903_JaffaCakes118

  • Size

    1.3MB

  • MD5

    d534d4ada4b56d35bbaed72779e84903

  • SHA1

    22c223c53b2a2d2c4b406284d5bfbabcc074bcbf

  • SHA256

    ee095d9a6e7803bc2ce63763eee2a21a343c95509ec3f7d16e606a626451d6ce

  • SHA512

    933e570945cd56d4f2455ce73f1b90b6887ea08f0021845d8d75ee301e8b443a3509c747b43fd0407389f7144931a705092d2e3441bcd95ab0f742e666f65aae

  • SSDEEP

    24576:K+//7mf0WQop55WfdeTF/Rm3t4+rIiBBCDnYRn8TF/ADUjX7G7e3D:K+//g0WNp55wderKu+rIijaAQIIT

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d534d4ada4b56d35bbaed72779e84903_JaffaCakes118
    .rar
  • 1元租用CF神器账号.url
    .url
  • 前去寻找更多资源.url
    .url
  • 小刀防C 20G硬防打不死全能网站空间.url
    .url
  • 帐号获取.exe
    .exe windows:5 windows x86 arch:x86

    5c9b37872152b8e317b395ea5c8baf73


    Headers

    Imports

    Sections

  • 超级卡盟注册就送钻.url
    .url