General

  • Target

    0a63282a8cbcea9f675985a26db6d7ee_JaffaCakes118

  • Size

    1.5MB

  • MD5

    0a63282a8cbcea9f675985a26db6d7ee

  • SHA1

    1f3e2802c573cc51302c84a1e2c6cc39ca19ea8e

  • SHA256

    9f5386b79836098af157db7f3e3e0761fa615d2d3f7999e4bc737078e856dbe9

  • SHA512

    2930b9cd3bca82ab3f0cba8abd55c06a87793bd0100b334581869c0ee07e285b83ab9c80c157fe1af7962409839b6ef29aef0f5b794757500fdd60c254973c44

  • SSDEEP

    24576:L/41qmzGRlXIG6euHqpIAeKgP4kSDkrHcLWt2ss/IZ02WZOuX+BBiLR/muN/7FfO:L/41qke367HqpfeK7Zkr8SUBf25daR+R

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a63282a8cbcea9f675985a26db6d7ee_JaffaCakes118
    .zip
  • 517vpn.dll
    .dll windows:4 windows x86 arch:x86

    dd421a44a36538f7f8c83f83e09a5db2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vpnclientᰮ.vmp.exe
    .exe windows:4 windows x86 arch:x86

    9a2bd9b17182d72334e4e6360b485e26


    Headers

    Imports

    Exports

    Sections

  • ʰQ.url
    .url
  • QQ.url
  • ѸӰ.url