Overview

overview

7

Static

static

7

YY7wIDsq/�...��.exe

windows7-x64

7

YY7wIDsq/�...��.exe

windows10-2004-x64

7

YY7wIDsq/�...��.url

windows7-x64

1

YY7wIDsq/�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c6cfcf2ed4fa5907ff75e84fe936b2b_JaffaCakes118

  • Size

    1.3MB

  • MD5

    0c6cfcf2ed4fa5907ff75e84fe936b2b

  • SHA1

    7783510b5c95d827a1dfe2dc2171355e306f3c27

  • SHA256

    9051cc3c14a8cf15489fc09a498efdd702d87b65322b26b053e73ee0804265c4

  • SHA512

    5854fd695d3dd898f5856ab255e6829fc865217546ab851b6583f489e6401ca0690a44b2cbb9564659973ce0f07bed945cfe05ca47fb120ff15ee14ba47c248f

  • SSDEEP

    24576:e77nl8Qn3GJn5NrpihqE5tSrJaloTtLCAK0Ep0o1O/jjcjDcW:eHlh2nJpatzSrJaleCAKpicjYW

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c6cfcf2ed4fa5907ff75e84fe936b2b_JaffaCakes118
    .rar
  • YY7wIDsq/歪歪7位ID申请.exe
    .exe windows:5 windows x86 arch:x86

    4d7a37df2191d032c838f103f44f16d1


    Headers

    Imports

    Sections

  • YY7wIDsq/飘荡软件.url
    .url