Overview

overview

7

Static

static

7

d3891de582...18.dll

windows7-x64

7

d3891de582...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3891de582f66a28855e9a5604642580_JaffaCakes118

  • Size

    48KB

  • MD5

    d3891de582f66a28855e9a5604642580

  • SHA1

    ac059b21f57974bb4aaefbbbf8fab57fe7275f7e

  • SHA256

    9bca833cf83c04bfe0151c98f6e290c9b75ee14a818757a50287bfe2b1b19754

  • SHA512

    d483386e418bcb0ae3513e72c8a3cfdd1e018c7339f0a438d719c62c27e5e3de1e649409cda7d5d49059298dfd0cfc65b1b3644ecb34085b6288a41a1cc165cc

  • SSDEEP

    768:CI55QfNoT5xBuj/zUb8G9Fa2h39cAGzLLyXSlcuSYd1H3PwSG3KLIulgkeLg:C25QV4b8G9DhNs3yCDHHIS8uqke

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3891de582f66a28855e9a5604642580_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    65ed6e4278ba86ab8967a6c1593a4d48


    Headers

    Imports

    Exports

    Sections