General

  • Target

    28fc276b1e7b49df7ec699791c1f3bb7_JaffaCakes118

  • Size

    1.5MB

  • MD5

    28fc276b1e7b49df7ec699791c1f3bb7

  • SHA1

    ba97d9c12c2caafb18a1a96123bf9fb7aa13603d

  • SHA256

    2295a1ea893244acdbc60363ebbe79e63594570a352e7735724415979b769752

  • SHA512

    7534eb1d315f597ef9495f2650d06db98fd40afc166bb62a5bf944c4a0b8fec64f2513494e6a46542f3d0834310393cedc5c7e92ca5f7275034017755f615ef9

  • SSDEEP

    49152:xmCpXNytOdK+G+dw2LCAnZ1M2Iri/c/6SlYg:vXNFdKhX2LCAJlc/6SlYg

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28fc276b1e7b49df7ec699791c1f3bb7_JaffaCakes118
    .rar
  • ARP联盟.url
  • QQ.exe
    .exe windows:4 windows x86 arch:x86

    e593591001d4f4bb05c98a06f18a17fa


    Headers

    Imports

    Exports

    Sections

  • d3d9.dll
    .dll windows:4 windows x86 arch:x86

    01d1c0b05a87b9bbfa93b310e4ad10a2


    Headers

    Imports

    Exports

    Sections

  • data/d3dx9_37.dll
    .dll windows:6 windows x86 arch:x86

    ef2f5208fe9e5732aaa58d1e71a2f0cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 使用说明.url