Overview

overview

8

Static

static

7

�...��.url

windows7-x64

1

�...��.url

windows10-2004-x64

1

�...mp.exe

windows7-x64

8

�...mp.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c7b0f2de6df1618efe1b5e4bbc69a6f_JaffaCakes118

  • Size

    2.1MB

  • MD5

    0c7b0f2de6df1618efe1b5e4bbc69a6f

  • SHA1

    984915b33d2e6456571f43d7043b057534bbd230

  • SHA256

    e6a3eba4f45524b9639e4dcf88b8f56be32b07382b177408316deb21330fcd10

  • SHA512

    546a2adb78feac2869a2a8b4e04bda524a51b1368289a77d6ccf85a18a2897c81a94d9a632fdb0bf4ecdcdabd7364535de12c293cab5995b2c73d1d2b0f543fb

  • SSDEEP

    24576:GNr5wbrxL85j1sFj14CiGfxnRUkTmwzPnQWMY1M+W857GnRLtp2M/kP8bX6J9F6W:GpC/18TsXlfxnOFEPHWo7ARc2bXLW

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c7b0f2de6df1618efe1b5e4bbc69a6f_JaffaCakes118
    .zip
  • CF䡾װ+صַ.txt
  • CFרҵ̬๦ܸʹ˵.txt
  • Ϸ.txt
  • Ϸ.url
    .url
  • ¹ܽͼ311.jpg
    .jpg
  • CF[wһ]ȫoV10.11.1.vmp.exe
    .exe windows:4 windows x86 arch:x86

    80b220c0ab916fbbb04a553af13edebe


    Headers

    Imports

    Sections