Overview
overview
3Static
static
1data/templ...et.ps1
windows7-x64
3data/templ...et.ps1
windows10-2004-x64
3data/templ...il.ps1
windows7-x64
3data/templ...il.ps1
windows10-2004-x64
3data/templ...ld.ps1
windows7-x64
3data/templ...ld.ps1
windows10-2004-x64
3data/templ...on.ps1
windows7-x64
3data/templ...on.ps1
windows10-2004-x64
3data/templ...c4.ps1
windows7-x64
3data/templ...c4.ps1
windows10-2004-x64
3lib/rex/po...nd.ps1
windows7-x64
3lib/rex/po...nd.ps1
windows10-2004-x64
3lib/rex/po...ut.ps1
windows7-x64
3lib/rex/po...ut.ps1
windows10-2004-x64
3lib/rex/po...ad.ps1
windows7-x64
3lib/rex/po...ad.ps1
windows10-2004-x64
3lib/rex/po...ds.ps1
windows7-x64
3lib/rex/po...ds.ps1
windows10-2004-x64
3lib/rex/po...pt.ps1
windows7-x64
3lib/rex/po...pt.ps1
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
data/templates/to_mem_dotnet.ps1
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
data/templates/to_mem_dotnet.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
data/templates/to_mem_msil.ps1
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
data/templates/to_mem_msil.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
data/templates/to_mem_old.ps1
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
data/templates/to_mem_old.ps1
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
data/templates/to_mem_pshreflection.ps1
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
data/templates/to_mem_pshreflection.ps1
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
data/templates/to_mem_rc4.ps1
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
data/templates/to_mem_rc4.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
lib/rex/powershell/command.ps1
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
lib/rex/powershell/command.ps1
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
lib/rex/powershell/output.ps1
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
lib/rex/powershell/output.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
lib/rex/powershell/payload.ps1
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
lib/rex/powershell/payload.ps1
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
lib/rex/powershell/psh_methods.ps1
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
lib/rex/powershell/psh_methods.ps1
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
lib/rex/powershell/script.ps1
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
lib/rex/powershell/script.ps1
Resource
win10v2004-20240508-en
General
-
Target
2eda21778904e9ae6295098fd092b114_JaffaCakes118
-
Size
28KB
-
MD5
2eda21778904e9ae6295098fd092b114
-
SHA1
5bb916335ed0cbd1da165e9d14c5f1848ac6cb53
-
SHA256
b401cd6a340fbc40bf7361fc3d34d350486f4d7800b905f1dc0b69b16e439187
-
SHA512
058b84dbc2c1acb70d16e8262da07625306ddb299e593d383be2f5fce1c35bb0f4481b5e5c066c3297b31c6dbbb81018a7f54d0e8ddf15bf378bd1db5f16bb9f
-
SSDEEP
384:vFI+owBAzybkeFo/mDLdn5JtIUmtV4H1GXsH9hbUcRSTqbKZSL9k01Q1bgjEp7wv:ve+2mD3JtyWGXE9SYNLC91aEpJVK
Malware Config
Signatures
Files
-
2eda21778904e9ae6295098fd092b114_JaffaCakes118.tar
-
checksums.yaml.gz.gz
-
checksums.yaml
-
checksums.yaml.gz.sig
-
data.tar.gz.gz
-
data.tar.tar .ps1 polyglot
-
.gitignore
-
.rspec
-
.travis.yml
-
CODE_OF_CONDUCT.md
-
Gemfile
-
LICENSE
-
README.md
-
Rakefile
-
data/templates/to_mem_dotnet.ps1.template.ps1
-
data/templates/to_mem_msil.ps1.template.ps1
-
data/templates/to_mem_old.ps1.template.ps1
-
data/templates/to_mem_pshreflection.ps1.template.ps1
-
data/templates/to_mem_rc4.ps1.template.ps1
-
lib/rex/powershell.rb
-
lib/rex/powershell/command.rb.ps1
-
lib/rex/powershell/function.rb
-
lib/rex/powershell/obfu.rb
-
lib/rex/powershell/output.rb.ps1
-
lib/rex/powershell/param.rb
-
lib/rex/powershell/parser.rb
-
lib/rex/powershell/payload.rb.ps1
-
lib/rex/powershell/psh_methods.rb.ps1
-
lib/rex/powershell/script.rb.ps1
-
lib/rex/powershell/templates.rb
-
lib/rex/powershell/version.rb
-
rex-powershell.gemspec
-
data.tar.gz.sig
-
metadata.gz.gz
-
metadata
-
metadata.gz.sig