Overview

overview

8

Static

static

7

Victoria 4...mi.htm

windows7-x64

3

Victoria 4...mi.htm

windows10-2004-x64

3

Victoria 4...lk.sys

windows7-x64

1

Victoria 4...lk.sys

windows10-2004-x64

1

Victoria 4...47.exe

windows7-x64

8

Victoria 4...47.exe

windows10-2004-x64

8

Victoria 4...lp.htm

windows7-x64

3

Victoria 4...lp.htm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6eb5940fdaf38380e3971896c4bf243_JaffaCakes118

  • Size

    735KB

  • MD5

    d6eb5940fdaf38380e3971896c4bf243

  • SHA1

    80e726a6c1069b30dd44fb934e161403a1913504

  • SHA256

    cc0b151055e7d4bceeb128577123ceeea39cf4078d3ecd0ead1fb5245d50e0f9

  • SHA512

    1d8ba61a790c3253302fa931f9329d592a7fca7b12fa16a2422447078466ea8a5777e11c94ec5d0786cd5fe36b682aaafa6511ca7c134bae2a91125942e965ab

  • SSDEEP

    12288:lnSL2CAwI1U7tUEKdkweCdwdGti/WLvKmVDaKLeUngjTrft15OZ+CDVXK+H43a9X:lnSajGDCdM/W+uDaKATr1PA+YKO4yzxF

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d6eb5940fdaf38380e3971896c4bf243_JaffaCakes118
    .zip
  • Victoria 4.47 for x64/dummi.htm
  • Victoria 4.47 for x64/fixes447.txt
  • Victoria 4.47 for x64/porttalk.sys
    .sys windows:5 windows x86 arch:x86

    a9829c217b84b04d4d54693885594f4e


    Headers

    Imports

    Sections

  • Victoria 4.47 for x64/vcr40.ini
  • Victoria 4.47 for x64/vcr447.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • Victoria 4.47 for x64/vichlp.htm
    .html