Overview

overview

7

Static

static

7

DSDOS.bat

windows7-x64

1

DSDOS.bat

windows10-2004-x64

1

DSDOS.exe

windows7-x64

DSDOS.exe

windows10-2004-x64

DSWIN.bat

windows7-x64

6

DSWIN.bat

windows10-2004-x64

6

DSWIN.exe

windows7-x64

6

DSWIN.exe

windows10-2004-x64

6

MANUAL.pdf

windows7-x64

1

MANUAL.pdf

windows10-2004-x64

1

SETUP.exe

windows7-x64

7

SETUP.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ae59507f1190401a3551ef2f9f0a2f4_JaffaCakes118

  • Size

    773KB

  • MD5

    4ae59507f1190401a3551ef2f9f0a2f4

  • SHA1

    cfbb91301243a8bfabba8ceb1d0f7637499cd31e

  • SHA256

    461d83b68c5b7afb97eb2a9f21c4622b7b5250a3cd6bab01bde492349f9ecb46

  • SHA512

    c2abda12ad75207df506d50cd57fef7b56dc28429f3e5a6751d9c872a0d2b0424b15d38950322edc42b9c57283ddce58d728e26f3c1dca9ac6cad35ed9f40b2e

  • SSDEEP

    12288:n4a3/0EflS79dUXlJCtAJF8o6KR/M+uuNeJF+VJEHdutSaGQG4C62mEvVR9yWCYD:nUxhaF8C/xjf0HYzG2CmE9RIzy/Aq

Score
7/10
pdflinkupx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ae59507f1190401a3551ef2f9f0a2f4_JaffaCakes118
    .rar
  • DSDOS.BAT
  • DSDOS.EXE
  • DSDOS.HLP
  • DSWIN.BAT
  • DSWIN.CNT
  • DSWIN.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • DSWIN.HLP
  • FREEDOS.BIN
    .zip
  • MANUAL.PDF
    .pdf

    • http://partitons.tt

    • http://www.freedos.org

    • http://www.freedos.org/See

    • http://www.star-tools.com/All

  • ORDER.TXT
  • PAD_FILE.XML
    .xml
  • READ.---
  • README.TXT
  • SETUP.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • SETUP.INF