@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
General
-
Target
2b22b271535ff9f8b63912fe48b597c2_JaffaCakes118
-
Size
1.4MB
-
MD5
2b22b271535ff9f8b63912fe48b597c2
-
SHA1
d9c5745854192980375a9e2a15e1fe0c3f1a3684
-
SHA256
aed5ce71d4dff26c4b257c3a309d5dd2a16950b9ea01da7d2d85a64fd26bdcc1
-
SHA512
775b442a00fbcfeb3b8a39ba08e89768e13472183d75dcecb93f22e512d88e558b0ba7110e7a44eb19b138135f1fc85e9b31ac32f5afb83040b3b5e22f419766
-
SSDEEP
24576:+oVFaTadfuHcfvIwneFCVahb7b71DjgzdQTW1aoeeC9t8PiztsGPMkc/A2UR/CrE:+oVFEaVu8Hn/Vahr71DUedMC9t8qzts4
Score
3/10
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2b22b271535ff9f8b63912fe48b597c2_JaffaCakes118
-
29a232/--------.---
-
29a232/29A#2.1_1
-
29a232/29A#2.1_2
-
29a232/29A#2.1_3
-
29a232/29A#2.1_4
-
29a232/29A#2.1_5
-
29a232/29A#2.1_6
-
29a232/29A#2.1_7
-
29a232/29A#2.1_8
-
29a232/29A#2.1_9
-
29a232/29A#2.1_A
-
29a232/29A#2.2_1
-
29a232/29A#2.2_2
-
29a232/29A#2.2_3
-
29a232/29A#2.2_4
-
29a232/29A#2.2_5
-
29a232/29A#2.2_6
-
29a232/29A#2.2_7
-
29a232/29A#2.2_8
-
29a232/29A#2.2_9
-
29a232/29A#2.2_A
-
29a232/29A#2.2_B
-
29a232/29A#2.3_1
-
29a232/29A#2.3_2
-
29a232/29A#2.3_3
-
29a232/29A#2.3_4
-
29a232/29A#2.3_5
-
29a232/29A#2.3_6
-
29a232/29A#2.3_7
-
29a232/29A#2.3_8
-
29a232/29A#2.3_9
-
29a232/29A#2.3_A
-
29a232/29A#2.3_B
-
29a232/29A#2.4_1
-
29a232/29A#2.4_2
-
29a232/29A#2.4_3
-
29a232/29A#2.4_4
-
29a232/29A#2.4_5
-
29a232/29A#2.4_6
-
29a232/29A#2.4_7
-
29a232/29A#2.4_8
-
29a232/29A#2.4_9
-
29a232/29A#2.4_A
-
29a232/29A#2.4_B
-
29a232/29A#2.5_1
-
29a232/29A#2.5_2
-
29a232/29A#2.5_3
-
29a232/29A#2.5_4
-
29a232/29A#2.5_5
-
29a232/29A#2.5_6
-
29a232/29A#2.5_7
-
29a232/29A#2.5_8
-
29a232/29A#2.5_9
-
29a232/29A#2.5_A
-
29a232/29A#2.5_B
-
29a232/29A#2.5_C
-
29a232/29A#2.5_D
-
29a232/29A#2.5_E
-
29a232/29A#2.5_F
-
29a232/29A#2.EXE
-
29a232/29A#2.ICO
-
29a232/29A#2.PIF
-
29a232/29ADATA1.DAT
-
29a232/29ADATA2.DAT
-
29a232/29ADATA3.DAT
-
29a232/FILES/29A_INCS.ZIP
-
MZ.INC
-
PE.INC
-
USEFUL.INC
-
WIN32API.INC
-
29a232/FILES/GETPROC.EXE
0db610bf3933b22b3ffd863964d1e929
Headers
Imports
Exports
Sections
-
29a232/FILES/IAVR.EXE
-
29a232/FILES/PEWRSEC.COM
-
29a232/FILES/VIRUSES/ANDROID.ZIP
-
ANDROID.COM
-
29a232/FILES/VIRUSES/ANIMO.ZIP
-
ANIMO.COM
-
29a232/FILES/VIRUSES/ANTI-ETA.ZIP
-
ANTI-ETA.EXE
-
29a232/FILES/VIRUSES/BABYBUG.ZIP
-
BABYBUG.EXE
-
29a232/FILES/VIRUSES/CABANAS.ZIP
-
CABANAS.EXE
aa25bf63b57873c47f41aaf139fee93b
Headers
Imports
Sections
-
29a232/FILES/VIRUSES/CAP.ZIP
-
CAP.DOC
-
29a232/FILES/VIRUSES/CARRIERS.ZIP
-
CARRIERS.COM
-
29a232/FILES/VIRUSES/DEMENTIA.ZIP
-
29a232/FILES/VIRUSES/DOGPAW.ZIP
-
29a232/FILES/VIRUSES/ELVIRA.ZIP
-
29a232/FILES/VIRUSES/ESPERANT.ZIP
-
29a232/FILES/VIRUSES/GOLLUM.ZIP
-
29a232/FILES/VIRUSES/HMABOOT.ZIP
-
29a232/FILES/VIRUSES/INSERT20.ZIP
-
29a232/FILES/VIRUSES/JACKY.ZIP
-
29a232/FILES/VIRUSES/LIZARD.ZIP
-
29a232/FILES/VIRUSES/NULSPACE.ZIP
-
29a232/FILES/VIRUSES/ORGASMAT.ZIP
-
29a232/FILES/VIRUSES/PARAG-30.ZIP
-
29a232/FILES/VIRUSES/PDNWARR1.ZIP
-
29a232/FILES/VIRUSES/PLY5175.ZIP
-
29a232/FILES/VIRUSES/PRION.ZIP
-
29a232/FILES/VIRUSES/REDCODE.ZIP
-
29a232/FILES/VIRUSES/SPIC2125.ZIP
-
29a232/FILES/VIRUSES/SSR19834.ZIP
-
29a232/FILES/VIRUSES/SUCKSEXE.ZIP
-
29a232/FILES/VIRUSES/TUPAC.ZIP
-
29a232/FILES/VIRUSES/WANDERER.ZIP
-
29a232/FILES/VIRUSES/YOUGOTIT.ZIP
-
29a232/FILES/VIRUSES/Z0MBIE.ZIP
-
29a232/FILES/VIRUSES/ZOHRA.ZIP
-
29a232/FILES/VIRUSES/index.html
-
29a232/FILES/VIRUSES/index16c1.html
-
29a232/FILES/VIRUSES/index2846.html
-
29a232/FILES/VIRUSES/index5272.html
-
29a232/FILES/VIRUSES/index79c2.html
-
29a232/FILES/VIRUSES/index7e6f.html
-
29a232/FILES/VIRUSES/index864c.html
-
29a232/FILES/VIRUSES/indexb3a7.html
-
29a232/FILES/VIRUSES/indexcaa7.html
-
29a232/FILES/index.html
-
29a232/FILES/index16c1.html
-
29a232/FILES/index2846.html
-
29a232/FILES/index5272.html
-
29a232/FILES/index79c2.html
-
29a232/FILES/index7e6f.html
-
29a232/FILES/index864c.html
-
29a232/FILES/indexb3a7.html
-
29a232/FILES/indexcaa7.html
-
29a232/FILE_ID.DIZ
-
29a232/INTRODT1.DAT
-
29a232/INTRODT2.DAT