General

  • Target

    Worm.Win32.Kebede.I (source code).zip

  • Size

    53KB

  • MD5

    5a777ecf70cb7de6fe240e86d00d9a46

  • SHA1

    a170968c8765a3e98e8e2cb1182434e3034be2a8

  • SHA256

    481588c1acd2ddd42c9d9571721bce808c6bf78d274510d562df31f6775c2add

  • SHA512

    5d083c27a4096f2980af2dc6532f685e81370cee389c242eb00768f9c3dccb04f0c9576ef2ca3afb24d59222737051909478397d662640730fe472294cc2155b

  • SSDEEP

    1536:JrnXQHJQSkaLG/9TvTzDL2B9fqnEGH4/2:JrnXQHGSkaLM9XnimXYe

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Worm.Win32.Kebede.I (source code).zip
    .zip

    Password: infectie

  • Kebede.I/CRC32.cls
    .vbs
  • Kebede.I/Constans.bas
  • Kebede.I/DropperHex.bas
  • Kebede.I/Icon1.ico
  • Kebede.I/KebedeH.bas
    .vbs
  • Kebede.I/KebedeH.csi
  • Kebede.I/KebedeH.lvw
  • Kebede.I/KebedeH.vbp
  • Kebede.I/KebedeH.vbw
  • Kebede.I/MSSCCPRJ.SCC
  • Kebede.I/ReadMe.txt
  • Kebede.I/Structs.bas
  • Kebede.I/W32_API.bas
  • Kebede.I/Zip_Mod.bas
    .vbs
  • Kebede.I/rot13.exe
    .exe windows:4 windows x86 arch:x86

    Password: infectie

    392936f4eb9862f0d3e63a982794f2a9


    Headers

    Imports

    Sections