Overview

overview

7

Static

static

7

1a8c4d88c4...18.exe

windows7-x64

7

1a8c4d88c4...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a8c4d88c4fa380ff11f201f8ceb976b_JaffaCakes118

  • Size

    85KB

  • Sample

    240701-j2nres1anc

  • MD5

    1a8c4d88c4fa380ff11f201f8ceb976b

  • SHA1

    f41a3ae18c30aaf2724d6b71702ec3927464e6c3

  • SHA256

    6e9834a7440cb1a6b2b1ee6bb57b3b396079f81839c689c0c4a065f12eea6869

  • SHA512

    33295b759344db2b1e6fb342d1da01172cc252f4097f63e6ae9fc76e30e0a2ec91375318293ffca4e8b928ea0f76ca78d82bca6a3894e8ce918893f535e65ae3

  • SSDEEP

    1536:tzTV8ja1LqV51oLUQutfTKR/kCRu2Afl89t4+7o7GT8ER27xXWuTDPZp0a1FcJqT:tvV8ja1+ZoLUQUf2/kCY2Afl89jFR21T

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      1a8c4d88c4fa380ff11f201f8ceb976b_JaffaCakes118

    • Size

      85KB

    • MD5

      1a8c4d88c4fa380ff11f201f8ceb976b

    • SHA1

      f41a3ae18c30aaf2724d6b71702ec3927464e6c3

    • SHA256

      6e9834a7440cb1a6b2b1ee6bb57b3b396079f81839c689c0c4a065f12eea6869

    • SHA512

      33295b759344db2b1e6fb342d1da01172cc252f4097f63e6ae9fc76e30e0a2ec91375318293ffca4e8b928ea0f76ca78d82bca6a3894e8ce918893f535e65ae3

    • SSDEEP

      1536:tzTV8ja1LqV51oLUQutfTKR/kCRu2Afl89t4+7o7GT8ER27xXWuTDPZp0a1FcJqT:tvV8ja1+ZoLUQUf2/kCY2Afl89jFR21T

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks