General

  • Target

    409441d818ef3bac76e3a40032495f4d_JaffaCakes118

  • Size

    3.5MB

  • MD5

    409441d818ef3bac76e3a40032495f4d

  • SHA1

    b35322693b791d46f9e19b7a139415d6ea9c7ce1

  • SHA256

    408788edf56d330b9af977f1618a0207fd53cac5fbfca353b7b950907b87215f

  • SHA512

    bb5b72a863a436f4f8ac7962156bd12751c26a3bfa7d521db5cf5620c92cffc1c4e7672025c4d91d71529cddf2fce081e8079739676105aee855f3dab9ffbe4b

  • SSDEEP

    98304:4izVv38bt5ECOQKlTl/rsQKP+PB/5bRVchctMG5i:zVq8TlThKPq5Qhc6Si

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 409441d818ef3bac76e3a40032495f4d_JaffaCakes118
    .rar
  • VK-v33/Skin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VK-v33/V.exe
    .exe windows:4 windows x86 arch:x86

    73231eb03db3df4755eda4d0c5467b75


    Headers

    Imports

    Sections

  • VK-v33/v/VKCFG.ini
  • VK-v33/v/War3Shout.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • VK-v33/v/hdl.wav
  • VK-v33/v/pe.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VK-v33/v/spb.dll
    .dll windows:5 windows x86 arch:x86

    43496a597512770d1bc2faad4c5f1391


    Headers

    Imports

    Sections

  • VK-v33/v/update.exe
    .exe windows:4 windows x86 arch:x86

    f87bd3ed7bbaf70d9a443a92e29a6a0c


    Headers

    Imports

    Sections

  • VK-v33/v/vkbg.jpg
    .jpg
  • VK-v33/v/vkskin.she
  • VK-v33/v/wsset.ini
  • VK-v33/请运行V.exe启动VK-11专用版本.txt
  • 下载说明.txt
  • 挂挂一族.url
    .url
  • 牛牛牛电影网.url
    .url