General

  • Target

    0f5f749503f04583a62c729cc8ee6ed0_JaffaCakes118

  • Size

    317KB

  • MD5

    0f5f749503f04583a62c729cc8ee6ed0

  • SHA1

    4b78391b002441b4adb119e99de069b53229dd85

  • SHA256

    f383bce1b2651aa88b13d38ac94d9ee25b1dac658eb2f3d532d1aac2256f26fe

  • SHA512

    f6f35db5564c6fc7d1da34cabad31cc3e5b702b215394a216de6eb859ae40e883407e8eefd71c6c5d82084f3a4dd30b931e0f8ac375461f58eb040c65ed404a1

  • SSDEEP

    6144:+iyKVF9UTRcjEXEFqIdicJhpKoFIYTmVdqPvWn61WrsdA3by/aSzm:y4F9gXEk+iQhcYTmVdqPvlgrsdwW3i

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f5f749503f04583a62c729cc8ee6ed0_JaffaCakes118
    .rar
  • FluX-Hacks Net CF Hack 12.10.2013.dll
    .dll windows:5 windows x86 arch:x86

    35b029f44c69f515e843e1540c2ad868


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FluX-Hacks Net CF Hack 12.10.2013.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ReadMe.txt