Overview

overview

7

Static

static

7

1ae48fa2e2...18.dll

windows7-x64

7

1ae48fa2e2...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ae48fa2e2276cb696b7aa69321fca64_JaffaCakes118

  • Size

    724KB

  • Sample

    240701-l8b3bayfjp

  • MD5

    1ae48fa2e2276cb696b7aa69321fca64

  • SHA1

    7620defb9caa61a7c369478b9a9eda9fc76566f0

  • SHA256

    6f18b0f2f3ea8e9e6aa8dca80d446b4e6bbb37fc68df36e831ce270c67def40a

  • SHA512

    dac5cadc93a62dfea8474e0440810d1e1a0fe856011685cecff1ca58811e25741ab203e9d1d85c19789af732e9d2fc2e9e140e7f01795ab6867ab7a58e4fd836

  • SSDEEP

    12288:7NLMlgQLewMI9BHdQ+rmNMo23S+qGxJHYWLzKNf4Jh0g+vmL3qPYmJpdzNZF:SHXXHe+rCMNXHYq2kh1byYm/

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      1ae48fa2e2276cb696b7aa69321fca64_JaffaCakes118

    • Size

      724KB

    • MD5

      1ae48fa2e2276cb696b7aa69321fca64

    • SHA1

      7620defb9caa61a7c369478b9a9eda9fc76566f0

    • SHA256

      6f18b0f2f3ea8e9e6aa8dca80d446b4e6bbb37fc68df36e831ce270c67def40a

    • SHA512

      dac5cadc93a62dfea8474e0440810d1e1a0fe856011685cecff1ca58811e25741ab203e9d1d85c19789af732e9d2fc2e9e140e7f01795ab6867ab7a58e4fd836

    • SSDEEP

      12288:7NLMlgQLewMI9BHdQ+rmNMo23S+qGxJHYWLzKNf4Jh0g+vmL3qPYmJpdzNZF:SHXXHe+rCMNXHYq2kh1byYm/

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks