General

  • Target

    df91bd7f3f791d4f3521257d59108a24_JaffaCakes118

  • Size

    444KB

  • MD5

    df91bd7f3f791d4f3521257d59108a24

  • SHA1

    ee3eadd0fc71a2a9bf88b9aaee7ae223eab5cb88

  • SHA256

    778cc0e93f124070f185cfdaca85a296ace47944df28a182a45f30824107b66b

  • SHA512

    35e37a82a4c2356992c123a75f12afe02f5b064cb4074687c6473693f172efddd5c1e08298f664b3a5205dfe00cf04c60faa320f54df15112d9e7f7c7099f96d

  • SSDEEP

    12288:MYpA0ReNIU1BYExD+f7ifSb7vFn7jFFv1W7LZrKbJvN/S:M4/RcB1ZMfiYZnF510KbJpS

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • df91bd7f3f791d4f3521257d59108a24_JaffaCakes118
    .zip
  • lowHax/Loader.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • lowHax/README.txt
  • lowHax/lwHx-HgH.dll
    .dll windows:5 windows x86 arch:x86

    46a39e4da5adfe8eba0fc2464f8148c6


    Headers

    Imports

    Exports

    Sections

  • !.txt