Overview

overview

8

Static

static

7

Huong dan ...ap.url

windows7-x64

1

Huong dan ...ap.url

windows10-2004-x64

1

cnpro2.8 f...CF.exe

windows7-x64

8

cnpro2.8 f...CF.exe

windows10-2004-x64

8

hacktool.dll

windows7-x64

7

hacktool.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    14d0045a7b257d680666e47944781d88_JaffaCakes118

  • Size

    671KB

  • MD5

    14d0045a7b257d680666e47944781d88

  • SHA1

    534b9b66d70facfe83e58fa3924774de16aea668

  • SHA256

    2991ecfd31c9bdbe3b58b4fc44f1116e711c71867cab625acd116ca9f1d40c10

  • SHA512

    946e1fba217b91d1648b223d75b73fa78b47da6317a3f270a66f5918c4681f30555fe52c4505e21592f2f7238def74f89d63ef27c04072bed524ec343bd9052e

  • SSDEEP

    12288:nGisatyZGLSp4AhqYG/PmgDXJmtA8WzhWjPLQcpTBwm3VFaZfEtL5ZmJzyEpbgPy:nGpatRSpDs//PZmXXrMcQyVoeDcJGybz

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 14d0045a7b257d680666e47944781d88_JaffaCakes118
    .rar
  • Huong Dan.reg
  • Huong dan su dung Cnpromodz 2.8 fix Xtrap.url
    .url
  • cnpro2.8 fix connect CF.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • hacktool.dll
    .dll windows:4 windows x86 arch:x86

    58edd344d0464391e5683b55677090d0


    Headers

    Imports

    Exports

    Sections