Overview

overview

7

Static

static

7

BIN/PDTREE.exe

windows7-x64

BIN/PDTREE.exe

windows10-2004-x64

7

SOURCE/PDT...LE.vbs

windows7-x64

1

SOURCE/PDT...LE.vbs

windows10-2004-x64

1

SOURCE/PDT...UB.exe

windows7-x64

SOURCE/PDT...UB.exe

windows10-2004-x64

SOURCE/PDT...KE.bat

windows7-x64

1

SOURCE/PDT...KE.bat

windows10-2004-x64

1

SOURCE/PDT...OS.bat

windows7-x64

1

SOURCE/PDT...OS.bat

windows10-2004-x64

1

SOURCE/PDT...BC.bat

windows7-x64

1

SOURCE/PDT...BC.bat

windows10-2004-x64

1

SOURCE/PDT...VC.bat

windows7-x64

1

SOURCE/PDT...VC.bat

windows10-2004-x64

1

SOURCE/PDT...EE.htm

windows7-x64

1

SOURCE/PDT...EE.htm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    750e5d56331aa5bc07ad80ad3424ca57_JaffaCakes118

  • Size

    135KB

  • MD5

    750e5d56331aa5bc07ad80ad3424ca57

  • SHA1

    c90de9d99ab53a86a48f703d595657b576fd0a13

  • SHA256

    0e5dbfcf120dbd9b7ee2b2c41505c77e55d3e443a15baffde74dfe01846c3609

  • SHA512

    315cc7b13e38bed229739aebb0a8abf76abca70a34b39c7b74e733458f9ff77a0039f10b6f8f1262d960a55d72fc619292e68ff5307ea60c4e2e5e215e28a300

  • SSDEEP

    1536:rGC/Pwu7uCAt3THD6bUjLxgEHP1k6BGak3zX9Byi75CkJy6Rxsnw6EYFkd/ecmC:r9/PwuZwjhjLr0akjX9oi7xB3J66NN

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 750e5d56331aa5bc07ad80ad3424ca57_JaffaCakes118
    .zip
  • APPINFO/DU.LSM
  • APPINFO/PDTREE.LSM
  • BIN/PDTREE.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SOURCE/PDTREE/BUGS.TXT
  • SOURCE/PDTREE/CATGETS.C
  • SOURCE/PDTREE/CATGETS.H
  • SOURCE/PDTREE/CHANGES.TXT
  • SOURCE/PDTREE/COMPILE.TXT
    .vbs
  • SOURCE/PDTREE/DB.C
  • SOURCE/PDTREE/DB.H
  • SOURCE/PDTREE/EXTRA/EXEHDR.H
  • SOURCE/PDTREE/EXTRA/FIXSTUB.C
  • SOURCE/PDTREE/EXTRA/FIXSTUB.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SOURCE/PDTREE/FILES.LST
  • SOURCE/PDTREE/GET_LINE.C
  • SOURCE/PDTREE/LGPL.TXT
  • SOURCE/PDTREE/MAKE.BAT
  • SOURCE/PDTREE/MAKEDOS.BAT
    .bat .vbs
  • SOURCE/PDTREE/MAKWINBC.BAT
    .bat .vbs
  • SOURCE/PDTREE/MAKWINVC.BAT
    .bat .vbs
  • SOURCE/PDTREE/README.1ST
  • SOURCE/PDTREE/README.TXT
  • SOURCE/PDTREE/STACK.C
  • SOURCE/PDTREE/STACK.H
  • SOURCE/PDTREE/SUDOCODE.TXT
  • SOURCE/PDTREE/TREE.CPP
  • SOURCE/PDTREE/TREE.EN
  • SOURCE/PDTREE/TREE.ES
  • SOURCE/PDTREE/TREE.HTM
    .html
  • SOURCE/PDTREE/TREE.LV
  • SOURCE/PDTREE/W32FDOS.H
  • SOURCE/PDTREE/W32FDOS/LARGE/W32FDOS.CPP
  • SOURCE/PDTREE/W32FDOS/SMALL/W32FDOS.CPP
  • SOURCE/PDTREE/YES.TXT