General

  • Target

    ef32c5856be7c7867970ec2b8143c472_JaffaCakes118

  • Size

    736KB

  • MD5

    ef32c5856be7c7867970ec2b8143c472

  • SHA1

    2859619041538293cb1ef39d4fbba26ccb6f4572

  • SHA256

    1c9d4d50c0bc8c409da972cdfc4eb208f6c86a1b2db963c9ca836c8e9ea9ffa9

  • SHA512

    5cb7acf91aeffd10daa4495b0f12fe6825928966f2f1bb749f058a43ebde4e17d64ea21c7abab79083599779ee9a851c4cea60f62f65ad0c2e501f0af4c5659f

  • SSDEEP

    12288:dtagqA/4BgWmXYAoSCZlLd8C3ARk+IFnvvPr2LeDYvFJKbYcwuF/7PdpKw+t:YAwBgbYTZlFAyLvL2LeUbKbuuF/7Pdv

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef32c5856be7c7867970ec2b8143c472_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    c0634448132b64d3f5e5330b7f11bd3f


    Headers

    Imports

    Exports

    Sections