General

  • Target

    45ae14b668686c9f8377b27a05a8d6aa_JaffaCakes118

  • Size

    620KB

  • MD5

    45ae14b668686c9f8377b27a05a8d6aa

  • SHA1

    f6635804662df16d9c0cbfcc02bcc5b699d8639e

  • SHA256

    bdefb77b23283c00271cb62e030bd40e1c083ecbe94e6670dd096c14f3ce434d

  • SHA512

    8d1b6cbf55e3da1d9cb6967961defc3f1c9734e5b516291d8f322dee80b58116bfef8f36b6d1baed07a7f83da2d49f6bc3a3c7a76c42275c77bb409f7a4069cb

  • SSDEEP

    12288:p+13p0vPF5aegY8L9vTJVYY5SwCJPAadroeDOYu3AMM1SHozRHH9C:Y1mHFzARPYhJPVNoeDORHQZw

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 45ae14b668686c9f8377b27a05a8d6aa_JaffaCakes118
    .rar
  • 5762Crossfire20101226_0003.jpg
    .jpg
  • zs.exe
    .exe windows:4 windows x86 arch:x86

    1b1ca09774dbc5d4894057aaf7124fcc


    Headers

    Imports

    Exports

    Sections

  • zsLib.dll
    .dll windows:4 windows x86 arch:x86

    9e4340a9524ff9b2b466b0b82bf7932f


    Headers

    Imports

    Exports

    Sections

  • Как запускать.txt
  • Код активации.txt