Overview

overview

7

Static

static

7

24小时�...��.url

windows7-x64

1

24小时�...��.url

windows10-2004-x64

1

52jd_free.vmp.exe

windows7-x64

7

52jd_free.vmp.exe

windows10-2004-x64

7

SimplePro.dll

windows7-x64

7

SimplePro.dll

windows10-2004-x64

7

在线咨�...18.url

windows7-x64

1

在线咨�...18.url

windows10-2004-x64

1

大手实�...mp.exe

windows7-x64

7

大手实�...mp.exe

windows10-2004-x64

7

河源下�...om.url

windows7-x64

1

河源下�...om.url

windows10-2004-x64

1

简单挂�...om.url

windows7-x64

1

简单挂�...om.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d99ae8ce838cbe821960b2c0d1d165bf_JaffaCakes118

  • Size

    13.8MB

  • MD5

    d99ae8ce838cbe821960b2c0d1d165bf

  • SHA1

    6fe0721443b54748a0b935f6b12b9f2e7804ceba

  • SHA256

    88a8925d4bc160359e55bc187b1eac3414f7db4b30daf63cd632e55ae411dc13

  • SHA512

    26aeeba94a5db721e54f966385eb37c0b57a247f9fcaa8ceb4d792183cf78263cc17b593d5fdd4c7627206134928d9bc7343dd03ff3b0afa6779048c25b61191

  • SSDEEP

    393216:Q/mlgBg+bPDKLZng2hwEBKpl4vtIEt+h21DEDHfHMjCFbVCb1YdtkfN7:LgDpivKEb1AfHMjGENN7

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d99ae8ce838cbe821960b2c0d1d165bf_JaffaCakes118
    .rar
  • 24小时在线购买连接.url
  • 52jd_free.vmp.exe
    .exe windows:5 windows x86 arch:x86

    d7abaa47236110724f6ac4d39841c094


    Headers

    Imports

    Sections

  • SimplePro.DLL
    .dll windows:5 windows x86 arch:x86

    f31c173d7e50df6df613272aafe01bec


    Headers

    Imports

    Exports

    Sections

  • 在线咨询QQ：2468477218.url
  • 大手实用插件.vmp.exe
    .exe windows:5 windows x86 arch:x86

    ad11e7a5c6d839285657c4fce7210500


    Headers

    Imports

    Sections

  • 大手实用插件功能说明.txt
  • 报警/1.mp3
  • 报警/10.mp3
  • 报警/11.mp3
  • 报警/12.mp3
  • 报警/13.mp3
  • 报警/14.mp3
  • 报警/15.mp3
  • 报警/16.mp3
  • 报警/17.mp3
  • 报警/18.mp3
  • 报警/19.mp3
  • 报警/2.mp3
  • 报警/20.mp3
  • 报警/3.mp3
  • 报警/4.mp3
  • 报警/5.mp3
  • 报警/6.mp3
  • 报警/7.mp3
  • 报警/8.mp3
  • 报警/9.mp3
  • 河源下载站-Xz7.com.url
    .url
  • 简单挂官网：52jdg.com.url
  • 脚本/脚本框架.lua