Overview

overview

7

Static

static

7

-神创天...��.exe

windows7-x64

7

-神创天...��.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3743e604d2b6bc699213e1167e0a21f4_JaffaCakes118

  • Size

    5.6MB

  • MD5

    3743e604d2b6bc699213e1167e0a21f4

  • SHA1

    49dcc50a7ed36f4e7df9abef93ce739b22c42ba4

  • SHA256

    e0d7b844ba3b3f722f105cad9d7d97723b003856eb0418e9c44c265358d022ad

  • SHA512

    2b64291eff610ec7ae4227900ad829d812f81980d62fec358a702f70b46bfbf3a67c3bccdcb5876d395f624d2a31a9253e3dce5dfa7f05a1788e67821a422fd5

  • SSDEEP

    98304:viU4K4jCwsCL9OuVo/nK3JMdXz3QY6NcrwTWHdvvZgV+RUez7fp6VoGXzLGlOI5k:viU4HCwsS9pV4noCz2NJmvBZzN8XzLJv

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3743e604d2b6bc699213e1167e0a21f4_JaffaCakes118
    .rar
  • -神创天下叮当辅助1.07/Resources/my.ico
  • -神创天下叮当辅助1.07/Resources/temp.txt
  • -神创天下叮当辅助1.07/Resources/win7.txt
  • -神创天下叮当辅助1.07/Resources/win7npc.txt
  • -神创天下叮当辅助1.07/Resources/xp.txt
  • -神创天下叮当辅助1.07/Resources/xpnpc.txt
  • -神创天下叮当辅助1.07/Resources/xxx1.bmp
  • -神创天下叮当辅助1.07/Resources/悬赏免费的费.bmp
  • -神创天下叮当辅助1.07/Resources/悬赏榜.bmp
  • -神创天下叮当辅助1.07/Resources/悬赏立即的即.bmp
  • -神创天下叮当辅助1.07/Resources/护送美女的美.bmp
  • -神创天下叮当辅助1.07/Resources/追踪最下边.bmp
  • -神创天下叮当辅助1.07/Resources/飞云.bmp
  • -神创天下叮当辅助1.07/下载说明.txt
  • -神创天下叮当辅助1.07/神创天下叮当辅助.exe
    .exe windows:5 windows x86 arch:x86

    285733d60e92e1abb4836e7c54e3a4e3


    Headers

    Imports

    Sections