Overview

overview

10

Static

static

10

eb9ff1d00d...18.dll

windows7-x64

3

eb9ff1d00d...18.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb9ff1d00d618dd3876a8a247b414037_JaffaCakes118

  • Size

    424KB

  • MD5

    eb9ff1d00d618dd3876a8a247b414037

  • SHA1

    9b9d85d795fd3e49c6b143f844fb7291f844a73a

  • SHA256

    da2f13538091002f3d53f5da5aa12fa2d2343d3d97acab1fb928d5bbfe516aa1

  • SHA512

    f9c197492a4b302e097b4e7ffdc2374219e213d1fe78473e688ba0b78081d56741d58b0a5806c92d56f63b05b19e81e5a8420d74def639b5a0823fcfee7339dd

  • SSDEEP

    6144:W6XTOir9WsYBT6raDeTn43YclgZUiXdMsU+NfX417DUvDlSVpliT5:W6XTOlFBogg1MspNfhvDcVpq

Score
10/10
vmprotectblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb9ff1d00d618dd3876a8a247b414037_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    23cde79e9b3af507d45656636095ec46


    Headers

    Imports

    Exports

    Sections