General

  • Target

    54e0ea7116a1b4f10f3a0c7ab4cddbe2_JaffaCakes118

  • Size

    923KB

  • MD5

    54e0ea7116a1b4f10f3a0c7ab4cddbe2

  • SHA1

    b155e87e66958de01e11c502c5dfa22f9b060dd7

  • SHA256

    b598776644929eb0d269de5a987528dee30f166469d33f4998cf55843a75962a

  • SHA512

    09163c8db2e5c37ab5c4bad655b49f6912495fee82c05db81168473709a0c82a40b9768114b77cc789a409b15fa44a004b320a0b732255cce1d82c363a9c0726

  • SSDEEP

    24576:KMv0d/kR4+Aom/jIqHEjJW5kLa9MYe/J6z0bbdY:KL/kOCUIqHoJW2LWe/8z0lY

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 54e0ea7116a1b4f10f3a0c7ab4cddbe2_JaffaCakes118
    .rar
  • FC挂机工具v1.14/FC挂机工具.exe
    .exe windows:4 windows x86 arch:x86

    83da22aecc2d1fe89e019c135f27782b


    Headers

    Imports

    Exports

    Sections

  • FC挂机工具v1.14/使用说明.txt
  • FC挂机工具v1.14/软件声明.txt
  • ucbug软件下载站-www.ucbug.cc.url
    .url
  • 下载说明.txt