1kb.pdb
Overview
overview
10Static
static
3cpuhunter-...kb.exe
windows7-x64
1cpuhunter-...kb.exe
windows10-2004-x64
10cpuhunter-...up.vbs
windows7-x64
3cpuhunter-...up.vbs
windows10-2004-x64
3cpuhunter-...ler.py
ubuntu-18.04-amd64
1cpuhunter-...ler.py
debian-9-armhf
1cpuhunter-...ler.py
debian-9-mips
cpuhunter-...ler.py
debian-9-mipsel
cpuhunter-...pat.py
ubuntu-18.04-amd64
1cpuhunter-...pat.py
debian-9-armhf
1cpuhunter-...pat.py
debian-9-mips
cpuhunter-...pat.py
debian-9-mipsel
cpuhunter-...ter.py
ubuntu-18.04-amd64
3cpuhunter-...ter.py
debian-9-armhf
1cpuhunter-...ter.py
debian-9-mips
cpuhunter-...ter.py
debian-9-mipsel
cpuhunter-...tup.py
ubuntu-18.04-amd64
1cpuhunter-...tup.py
debian-9-armhf
1cpuhunter-...tup.py
debian-9-mips
cpuhunter-...tup.py
debian-9-mipsel
cpuhunter-...o/f.so
ubuntu-18.04-amd64
1cpuhunter-...o/k.so
ubuntu-18.04-amd64
1Static task
static1
Behavioral task
behavioral1
Sample
cpuhunter-master/WindowsFiles/is-dd.vbs/1kb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cpuhunter-master/WindowsFiles/is-dd.vbs/1kb.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
cpuhunter-master/WindowsFiles/to_common_startup.vbs
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
cpuhunter-master/WindowsFiles/to_common_startup.vbs
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
cpuhunter-master/exeinstaller.py
Resource
ubuntu1804-amd64-20240418-en
Behavioral task
behavioral6
Sample
cpuhunter-master/exeinstaller.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral7
Sample
cpuhunter-master/exeinstaller.py
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral8
Sample
cpuhunter-master/exeinstaller.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral9
Sample
cpuhunter-master/extra/auto_reboot_kapat.py
Resource
ubuntu1804-amd64-20240418-en
Behavioral task
behavioral10
Sample
cpuhunter-master/extra/auto_reboot_kapat.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral11
Sample
cpuhunter-master/extra/auto_reboot_kapat.py
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral12
Sample
cpuhunter-master/extra/auto_reboot_kapat.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
cpuhunter-master/extra/panelleri_gizle_goster.py
Resource
ubuntu1804-amd64-20240418-en
Behavioral task
behavioral14
Sample
cpuhunter-master/extra/panelleri_gizle_goster.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral15
Sample
cpuhunter-master/extra/panelleri_gizle_goster.py
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral16
Sample
cpuhunter-master/extra/panelleri_gizle_goster.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral17
Sample
cpuhunter-master/extra/run_on_startup.py
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral18
Sample
cpuhunter-master/extra/run_on_startup.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral19
Sample
cpuhunter-master/extra/run_on_startup.py
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral20
Sample
cpuhunter-master/extra/run_on_startup.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral21
Sample
cpuhunter-master/so/f.so
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral22
Sample
cpuhunter-master/so/k.so
Resource
ubuntu1804-amd64-20240226-en
General
-
Target
13f1c4803636ad776485cb41c2c853ac_JaffaCakes118
-
Size
733KB
-
MD5
13f1c4803636ad776485cb41c2c853ac
-
SHA1
dbba5a20a3eb52693feaf11e5d06874265270b44
-
SHA256
2bb71ca4a70842ccc89cede0a53d1be30f9d0cc35d828e2d15c816a36eb2ff47
-
SHA512
bd64af0e67f189d154cc0e03c21fd3de9d51362e5ac299606cb4808c776fad1aa681236058d2ede82a4c2a628d939ae7980c9620fa349102a4e4acdb1473a7fe
-
SSDEEP
12288:QL+fPzclouOT55WMfxtZCy/j7dkYr/bPmU0Ne3P3fHrubAGaeFkUNPt7n36:QdlHA5M6x7Cyf+I5GAvDubH9Nt7K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cpuhunter-master/WindowsFiles/is-dd.vbs/1kb.exe
Files
-
13f1c4803636ad776485cb41c2c853ac_JaffaCakes118.zip
-
cpuhunter-master/.gitignore
-
cpuhunter-master/LICENSE
-
cpuhunter-master/README.md
-
cpuhunter-master/README_tr.md
-
cpuhunter-master/WindowsFiles/is-dd.vbs/1kb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
cpuhunter-master/WindowsFiles/is-dd.vbs/1kb.exe.config
-
cpuhunter-master/WindowsFiles/to_common_startup.vbs.vbs
-
cpuhunter-master/_config.yml
-
cpuhunter-master/config.json
-
cpuhunter-master/exeinstaller.py.py .sh linux
-
cpuhunter-master/extra/auto_reboot_kapat.py.py .sh linux
-
cpuhunter-master/extra/first_run.md
-
cpuhunter-master/extra/panelleri_gizle_goster.py.py .sh linux
-
cpuhunter-master/extra/run_on_startup.py.py .sh linux
-
cpuhunter-master/extra/software.reg
-
cpuhunter-master/run/copy_executables_to_here.txt
-
cpuhunter-master/so/dosyalar.so.elf .vbs linux x64 polyglot
-
cpuhunter-master/so/f.so.elf linux x64
-
cpuhunter-master/so/k.so.elf linux x64