Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

lanren.exe

windows7-x64

7

lanren.exe

windows10-2004-x64

7

修复Skin...��.bat

windows7-x64

1

修复Skin...��.bat

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0657b2881dea211b20c284c8fca16d9_JaffaCakes118

  • Size

    1.5MB

  • MD5

    e0657b2881dea211b20c284c8fca16d9

  • SHA1

    f23648670b49b4a1a646b201a3dfe144a601d21a

  • SHA256

    a7d607318df93e8ce3adc8b9f58459897350741e7866a1c4cf16c30bd83282db

  • SHA512

    573e6d940fbfa8a6a27f24c8101f068408e785d613353879f0cc11f812f4c41ccfcc5813ad5034a5af4ae4e818b76ff1bb2712767eb2a6e066a37ff0f0ba61de

  • SSDEEP

    24576:f0OrlNbtW02Q6cBy/e+mh9RAWyXEjNX2Sb1t64KG6d33vCRiRVwJ66ShKIMy:8Ol2QCPXEYSb1o9p3vBV/ZKM

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e0657b2881dea211b20c284c8fca16d9_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • lanren.exe
    .exe windows:4 windows x86 arch:x86

    15751f8d097b9e1fe95db02e8094a008


    Headers

    Imports

    Sections

  • 修复SkinH_EL错误.bat
  • 说明.txt