General

  • Target

    fe5d5e3d2d7c255b25a298c7a8201313_JaffaCakes118

  • Size

    8.1MB

  • MD5

    fe5d5e3d2d7c255b25a298c7a8201313

  • SHA1

    733642c0b7f2aeb9cd72c3aa9b8d597007aea398

  • SHA256

    fa4b24b57aa2e808b446fd026814727482e00b10e5feee0f0bec569c00687427

  • SHA512

    65cd85a2bd9bfbf33c12b50809fed08a788c8891967930f7ba22c7f84295f6247136212c4dee0bf14231f088c10ed534fbe1d56b7c309a7b31b5f33ccb42d239

  • SSDEEP

    196608:/+TerPgU4s6z5iVLcx52Na9eonCK6801i5RgDn/gxaHw:W+PXgVIuoNawonCK6Xi5yb/7Hw

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • fe5d5e3d2d7c255b25a298c7a8201313_JaffaCakes118
    .rar
  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/11684.COM.url
    .url
  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/JK.dll
    .dll windows:4 windows x86 arch:x86

    f78a131fb39ecc759a97bb9534a748b4


    Headers

    Imports

    Exports

    Sections

  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/config.ini
  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/readme.htm
    .html
  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/winmm.dll
    .dll windows:4 windows x86 arch:x86

    21a845f31ae22fb4dad604b69f5618ba


    Headers

    Imports

    Exports

    Sections

  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/winspool.drv
    .dll windows:4 windows x86 arch:x86

    b5adfd9708cdd484e486b22945833d42


    Headers

    Imports

    Exports

    Sections

  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/奇易QQ挂常用IP工具V2.63.exe
    .exe windows:5 windows x86 arch:x86

    d0737ea7da92cd9ceb1c503c0e491967


    Headers

    Imports

    Exports

    Sections

  • smzy_qiyiqqguaji/[破解版]奇易QQ挂常用IP工具V2.63/请先读我.htm
    .html