General

  • Target

    388f10dc1ccc541fe9d6ff5f9919212c_JaffaCakes118

  • Size

    172KB

  • MD5

    388f10dc1ccc541fe9d6ff5f9919212c

  • SHA1

    d2ccb4f959e4e70addbecefd1cdbcc1c89a36011

  • SHA256

    4e12aad3cb454086d53eeffeb89ab15d6a58c46ec87887aec680854d5a89feae

  • SHA512

    e1405e1ab2fd9389d5d53a4e5dbc17a71a6e60e9046d610523ebc16d277612190afb2c4b766982cf31cffd64c50a9a311a875153c093df427ab509528d5a2d0c

  • SSDEEP

    3072:y6uvTju+QE7VdpMgpHWlgPG2BI+KupnCGVXLnE7cWijhW3AjoDSLx:y9vTjuZWVdp3p8SQ+KupC0XLnEFijkyN

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 388f10dc1ccc541fe9d6ff5f9919212c_JaffaCakes118
    .rar
  • 20091020-sp4/ARP联盟.url
  • 20091020-sp4/d3d9.dll
    .dll windows:4 windows x86 arch:x86

    df3a2e074179823e7054326e286568cd


    Headers

    Imports

    Exports

    Sections

  • 20091020-sp4/使用说明.txt
  • 20091020-sp4/使用说明.url
  • 20091020-sp4/帮助文件.url
  • 20091020-sp4/蜗牛透视.exe
    .exe windows:4 windows x86 arch:x86

    a1e67e3281dcc40aadac422d328be723


    Headers

    Imports

    Exports

    Sections