Overview

overview

7

Static

static

7

d9c6e82315...18.exe

windows7-x64

7

d9c6e82315...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9c6e82315283dcbe79a692ccbdd58d5_JaffaCakes118

  • Size

    1.5MB

  • MD5

    d9c6e82315283dcbe79a692ccbdd58d5

  • SHA1

    efd9f58e5fa9f5694310479a9c59dc919e166aed

  • SHA256

    4a5d3baaac7269e011c39104c744c858faf1e51d1651fabba69b7a9bf75e64ff

  • SHA512

    5cf75b9e074962218228ad6164ef4dfb9c89c5ce8a07dc3cce048db0e0046ff30ca8857c616bbf48084713bce9b84b6cbf3996bb05d3bbc99aaa87f1d77a2195

  • SSDEEP

    24576:NW9IAS4mugyOw9xErJ6yKjDdCSqlnAKAlNtB+vGPdQArfKad1YvNWXnHmEH+/FtW:E9DS4BXZyQpqCllNf+vGPdQYR6NWXnGi

Score
7/10
vmprotectaspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9c6e82315283dcbe79a692ccbdd58d5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections