General

  • Target

    383c36c773714b822cdb3834794ba27d_JaffaCakes118

  • Size

    713KB

  • MD5

    383c36c773714b822cdb3834794ba27d

  • SHA1

    ece602fce4c40520354067643b3e68814e2cb4d9

  • SHA256

    ae3248a23ffb6728213a37c2bab0606193c33a340bda7410287d0a769fa854df

  • SHA512

    7e12449b7810953bbffe99ff116f3c2ee5f0064117c6a3288c98a6706d7192e80e213738ffd60fec9828bacab742b874191ac07ce341ba570570fb782e2e0d89

  • SSDEEP

    12288:MDh+/yxDP0Cgmr+7z/VnB4YcWAZJFQ7sztDB4l64pCCuKEhUuHrrL:4DP0CgmrERBfbo24ztDB4M4p35GXvL

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 383c36c773714b822cdb3834794ba27d_JaffaCakes118
    .rar
  • SKIDROW/SKIDROW.dll
    .dll windows:5 windows x86 arch:x86

    ccb8ea8f09f8568c5028627c71dca040


    Headers

    Imports

    Exports

    Sections

  • SKIDROW/binkw32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SKIDROW/paul.dll
    .dll windows:5 windows x86 arch:x86

    b04af0503dfd0ef75dcc0951c85297ef


    Headers

    Imports

    Exports

    Sections