General

  • Target

    ef2f393076d12c96241e3dfc583b82b3_JaffaCakes118

  • Size

    2.4MB

  • MD5

    ef2f393076d12c96241e3dfc583b82b3

  • SHA1

    624037d6373deb2907b232535ad2e950e7793f32

  • SHA256

    f02508814980dde5a47f9e48a2d473b32e4eb75f8f444ae588672337d9b7fc71

  • SHA512

    d9b1f700e236085d0fc4b2da66968a0338964a0b613fe6aa9cd49c450ecc1638ca92f3539e57552119a657fb01e6b41952eb5d5281caad24d22441073c5d7bba

  • SSDEEP

    49152:rwPbxie6n/N/z+osyxB1xKhvbFsY1erV8vePWnczCXTpwqnw8Oby/ui9as3tYI5k:rKxivn/hNsy71gDFsVVjzCXTpdwdenwR

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • ef2f393076d12c96241e3dfc583b82b3_JaffaCakes118
    .rar
  • RedBoy 3.9.2/Bunifu_UI_v1.5.3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RedBoy 3.9.2/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RedBoy 3.9.2/FlatUI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RedBoy 3.9.2/RedBoy.dll
    .dll windows:6 windows x86 arch:x86

    1981aba9949f6c52b94c13c5b03df2ee


    Headers

    Imports

    Exports

    Sections

  • RedBoy 3.9.2/RedBoy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RedBoy 3.9.2/RedBoy_obfuscation_log.txt
  • RedBoy 3.9.2/Teen.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RedBoy 3.9.2/autoexec/ReadMe.txt
  • RedBoy 3.9.2/autoexec/init.txt