Overview

overview

3

Static

static

3

HELLO.pl

windows7-x64

3

HELLO.pl

windows10-2004-x64

3

LOGIN.htm

windows7-x64

1

LOGIN.htm

windows10-2004-x64

1

LOGINU.js

windows7-x64

1

LOGINU.js

windows10-2004-x64

1

doscgi.exe

windows7-x64

doscgi.exe

windows10-2004-x64

doscgi.js

windows7-x64

1

doscgi.js

windows10-2004-x64

1

doslogin.htm

windows7-x64

1

doslogin.htm

windows10-2004-x64

1

helloexe.pl

windows7-x64

3

helloexe.pl

windows10-2004-x64

3

xbase.js

windows7-x64

1

xbase.js

windows10-2004-x64

1

TINY.exe

windows7-x64

1

TINY.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb9ad8b561704307fc5da9c76bb5aa38_JaffaCakes118

  • Size

    69KB

  • MD5

    fb9ad8b561704307fc5da9c76bb5aa38

  • SHA1

    4d04410cba529edb5507caa3266d2b5e2a21ab59

  • SHA256

    bf9c33ddafd0de32f9fee4837e88ecfe130b45336fc258c31c33f8e3c218be5a

  • SHA512

    08716a0be75048b2686797b6a398a5c9a447fac1f5ba2d651bc87af20757ce3d2544a4bd2dada8c964fd28aa785029ab916771076103ae5c943f127fdd30a4fd

  • SSDEEP

    1536:1OTfK2MIfURVp/O74EqmbCH2wU0cSQKCwPcN7fq/7at0pZ83JGFo:1OTfJHfURVp/G4ENmUnWCr7fU7atU2Qo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb9ad8b561704307fc5da9c76bb5aa38_JaffaCakes118
    .rar
  • CGITEST.ZIP
    .zip
  • HELLO.C
  • HELLO.PL
  • HELLOH.C
  • LOGIN.C
  • LOGIN.DPR
  • LOGIN.HTM
    .html
  • LOGINU.PAS
    .js
  • README.TXT
  • doscgi.exe
  • doscgi.pas
    .js
  • doslogin.htm
    .html
  • helloexe.pl
  • world.c
  • FILE_ID.DIZ
  • LICENCE.TXT
  • README.TXT
  • SRC.ZIP
    .zip
  • define.inc
  • srvmain.pas
  • tiny.dpr
  • xbase.pas
    .js
  • TINY.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot