General

  • Target

    30799d2d2aa93db22c59013229b40119_JaffaCakes118

  • Size

    7.9MB

  • MD5

    30799d2d2aa93db22c59013229b40119

  • SHA1

    41cce22237be2504430edb104b458ccf595400a4

  • SHA256

    855d994792ea448c414149c5e1d6d52f81bbbbf1864b8f019715228f962e5c20

  • SHA512

    18d6daca8cd7006d2b8c553de94be20adc78c03468ed5995eb57a74388b092c1a353274d5b686ab3b41e444d5ca6f4d72e98f72f1acb5aa613c35c33d893dedb

  • SSDEEP

    196608:zveQUx7VsRs18ED2XVd9Rne4Tf+RzGvbuOBx6jqXCWJG/fOi+XP9vGU:zm/QRWLONeXBOJGHOi+XPRGU

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30799d2d2aa93db22c59013229b40119_JaffaCakes118
    .rar
  • qqxwwycjshy_piaodown/炫舞网页抽奖三合一能版本.vmp.exe
    .exe windows:4 windows x86 arch:x86

    607f6a8c6ae9a894b01c3aa18f475651


    Headers

    Imports

    Sections

  • qqxwwycjshy_piaodown/飘荡软件.url
    .url