Overview

overview

6

Static

static

3

zbot/aliases.ps1

windows7-x64

3

zbot/aliases.ps1

windows10-2004-x64

3

zbot/mirc.exe

windows7-x64

6

zbot/mirc.exe

windows10-2004-x64

6

zbot/script.js

windows7-x64

3

zbot/script.js

windows10-2004-x64

3

zbot/script2.js

windows7-x64

3

zbot/script2.js

windows10-2004-x64

3

zbot/script4.js

windows7-x64

3

zbot/script4.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71d05ec9c052355074adc3619be65efa_JaffaCakes118

  • Size

    880KB

  • MD5

    71d05ec9c052355074adc3619be65efa

  • SHA1

    122156a54974b6ec51d842ecb27215a33c6e7b0b

  • SHA256

    955deded1ffd27b1f34ce1ae30d42dd76864a0866a5996eafc09de467e323c1d

  • SHA512

    9946c58a50d626670e6bda9b2f787b6d25188ba80c413a491fb34a0cd93a427188be96520dc61d9d367df947728a97f3cb9aa6af5c4848941f1ab4299625b4ac

  • SSDEEP

    24576:VqZ2xdjbETuhLnf4qtgxBcHsT3u0Gydw5EQ:0OBb60LwyYk5V

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 71d05ec9c052355074adc3619be65efa_JaffaCakes118
    .rar
  • zbot/aliases.ini
    .ps1
  • zbot/gamechans.txt
  • zbot/gc.txt
  • zbot/globmess.txt
  • zbot/globmess2.txt
  • zbot/hash/badnick.mercy
  • zbot/hash/blacklist.mercy
  • zbot/hash/config.mercy
  • zbot/hash/greeting.mercy
  • zbot/hash/nokick.mercy
  • zbot/hash/sexchan.mercy
  • zbot/hash/sw.mercy
  • zbot/ipne.txt
  • zbot/mirc.exe
    .exe windows:4 windows x86 arch:x86

    48e173f2d74bc2001922a67b1b9f5bca


    Headers

    Imports

    Sections

  • zbot/mirc.ini
  • zbot/nojoin.txt
  • zbot/nomode.txt
  • zbot/onjoins.txt
  • zbot/randomchan.txt
  • zbot/remote.ini
  • zbot/script.conf
    .js
  • zbot/script1.conf
  • zbot/script2.conf
    .js
  • zbot/script4.conf
    .js
  • zbot/serverchans.txt
  • zbot/socks.txt