General

  • Target

    d4b6be9fb0fddc4f54274b29cfb3233e_JaffaCakes118

  • Size

    740KB

  • MD5

    d4b6be9fb0fddc4f54274b29cfb3233e

  • SHA1

    5cf9b8b105ca86a21d3cb89ffe5932b0ad45c2be

  • SHA256

    f73fc82972efd4a6b6f55784610a0a6612e867c46370dadb9545a98656053115

  • SHA512

    b38ca77407fbf47a7dca388c2fff5a357f3dd00de5de691e1e82ca1b24885d06641f3403f51adad2c3b68ff695a72f00a175682cb383cb971b56ac0d686f5003

  • SSDEEP

    12288:6ZCml1+WcZFeXFX/GC0/a9WvlAFp1pm0gTyexY8/jdCLcpIM5WqnkyAzZAUM5SjH:6QaQvZFcBGCzVihxY8cLhM5PnkU95SjH

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d4b6be9fb0fddc4f54274b29cfb3233e_JaffaCakes118
    .rar
  • ubiorbitapi_r2.dll文件/dll一键安装.bat
  • ubiorbitapi_r2.dll文件/ubiorbitapi_r2.dll
    .dll windows:5 windows x86 arch:x86

    12140ef15379d339ba00ef6453514b29


    Headers

    Imports

    Exports

    Sections

  • ubiorbitapi_r2.dll文件/使用说明.txt
  • ubiorbitapi_r2.dll文件/游迅网.URL
    .url