Overview

overview

3

Static

static

3

32RTM.exe

windows7-x64

32RTM.exe

windows10-2004-x64

BRC.exe

windows7-x64

1

BRC.exe

windows10-2004-x64

1

BRC32.exe

windows7-x64

1

BRC32.exe

windows10-2004-x64

1

BRCC.exe

windows7-x64

1

BRCC.exe

windows10-2004-x64

1

BRCC32.exe

windows7-x64

1

BRCC32.exe

windows10-2004-x64

1

GREP.com

windows7-x64

GREP.com

windows10-2004-x64

IMPDEF.exe

windows7-x64

1

IMPDEF.exe

windows10-2004-x64

1

IMPLIB.exe

windows7-x64

1

IMPLIB.exe

windows10-2004-x64

1

MAKE.exe

windows7-x64

1

MAKE.exe

windows10-2004-x64

1

MAKER.exe

windows7-x64

MAKER.exe

windows10-2004-x64

MAKESWAP.exe

windows7-x64

MAKESWAP.exe

windows10-2004-x64

OBJXREF.exe

windows7-x64

1

OBJXREF.exe

windows10-2004-x64

1

RLINK.exe

windows7-x64

RLINK.exe

windows10-2004-x64

RLINK32.dll

windows7-x64

3

RLINK32.dll

windows10-2004-x64

3

RTM.exe

windows7-x64

RTM.exe

windows10-2004-x64

RW32CORE.dll

windows7-x64

1

RW32CORE.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    83822503c688e30f123747020755c31e_JaffaCakes118

  • Size

    5.2MB

  • MD5

    83822503c688e30f123747020755c31e

  • SHA1

    e272a218fbd6b69f2e34b45fcb964d5926990f04

  • SHA256

    ebbb2a1fe46a0ce39ff5653f864e852ed6f0b96db8877a278173b5581b9e9d5c

  • SHA512

    68dfb25e9fa452906359abbfa78ddfd288bfa091cab4ac7c7df5cee1d108e87f89fa22afbc29b7663a1fc33dd5a74f472b015d01e36460886a7585c118b68f3b

  • SSDEEP

    98304:zFBG8aD58zQC+fTsEMu7cV9bkHlLqu0IzHeT09OBxARFqYp+Drce/v25OyTQGi0H:BNaV8kC+X77cV4dfeA9qs8YsDrcEgOLA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • 83822503c688e30f123747020755c31e_JaffaCakes118
    .zip
  • DISK1/CMDLINE.PAK
    .lzh
  • 32RTM.EXE
  • BRC.EXE
    .exe windows:1 windows x86 arch:x86

    8215d787753c07a94e3be7883593d8a4


    Headers

    Imports

    Exports

    Sections

  • BRC32.EXE
    .exe windows:1 windows x86 arch:x86

    8215d787753c07a94e3be7883593d8a4


    Headers

    Imports

    Exports

    Sections

  • BRCC.EXE
    .exe windows:1 windows x86 arch:x86

    8215d787753c07a94e3be7883593d8a4


    Headers

    Imports

    Exports

    Sections

  • BRCC32.EXE
    .exe windows:1 windows x86 arch:x86

    a4cf53c525ead89ad2998c6d96ef8e0d


    Headers

    Imports

    Exports

    Sections

  • BUILTINS.MAK
  • DPMI16BI.OVL
  • DPMI32VM.OVL
  • GREP.COM
  • HELP.ICO
  • IMPDEF.EXE
    .exe windows:1 windows x86 arch:x86

    93446409a7fe60026d7c7e6ec6a63644


    Headers

    Imports

    Exports

    Sections

  • IMPLIB.EXE
    .exe windows:1 windows x86 arch:x86

    a5cbf5b27ef5840d956a0111f54e449f


    Headers

    Imports

    Exports

    Sections

  • MAKE.EXE
    .exe windows:1 windows x86 arch:x86

    24a90a7e3a29b0e2f9e420e896f95f34


    Headers

    Imports

    Exports

    Sections

  • MAKER.EXE
  • MAKESWAP.EXE
  • OBJXREF.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • RLINK.EXE
  • RLINK32.DLL
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • RTM.EXE
  • RW32CORE.DLL
    .dll windows:1 windows x86 arch:x86

    fe6b46665409a44383ff0da5540ef98b


    Headers

    Imports

    Exports

    Sections

  • RWRES.DLL
    .dll windows:1 windows x86 arch:x86

    757d2b12e736f89a7ffb47b2a12c249a


    Headers

    Imports

    Exports

    Sections

  • TASM.HLP
  • TDMEM.EXE
  • TDUMP.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • THUNK.EXE
    .exe windows:1 windows x86 arch:x86

    2523e15861a41d775e6f4375f7c1e398


    Headers

    Imports

    Sections

  • TLIB.EXE
    .exe windows:1 windows x86 arch:x86

    d460bad971e591cfada458e24da3af83


    Headers

    Imports

    Exports

    Sections

  • TOUCH.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • WINDPMI.386
  • WINSTUB.EXE
  • WORKOPT.DOS
  • DISK1/DISK1.DSK
  • DISK1/FILELIST.TXT
  • DISK1/INSTALL.EXE
  • DISK1/README.COM
  • DISK1/THUNK95.PAK
    .lzh
  • APP32.CPP
  • APP32.RC
  • APP32.RH
  • DLL16.CPP
  • DLL16.DEF
  • DLL32.CPP
  • DLL32.DEF
  • MAKEFILE
  • THUNK95.TXT
  • THUNKOBJ.THK
  • TOOLS.CPP
  • TOOLS.H
  • DISK1/TSM_INST.TXT
  • DISK1/TSM_RDME.TXT
    .vbs
  • DISK1/UNPAK.EXE
  • DISK2/CMD32.PAK
    .lzh
  • B32TOOLS.PIF
  • H2ASH32.EXE
    .exe windows:1 windows x86 arch:x86

    cb7d9d068f971c1d2eb4b9fc5b9634e1


    Headers

    Imports

    Exports

    Sections

  • TASM32.EXE
    .exe windows:1 windows x86 arch:x86

    4d4975372a0a6bc337783ec500f55f2f


    Headers

    Imports

    Sections

  • TDSTRP32.EXE
    .exe windows:1 windows x86 arch:x86

    5280eeeb1adaf2eca079d91eba6a6c44


    Headers

    Imports

    Exports

    Sections

  • TLINK32.EXE
    .exe windows:1 windows x86 arch:x86

    ac20a75c815ef2f23df2514e59356ce0


    Headers

    Imports

    Exports

    Sections

  • DISK2/DISK2.DSK
  • DISK2/TDDOS.PAK
    .lzh
  • TD.EXE
  • TD.PIF
  • TDDOS.ICO
  • TDHELP.TDH
  • TDINST.EXE
  • TDOSINST.ICO
  • TDREMOTE.EXE
  • TDRF.EXE
  • DISK2/TDWIN.PAK
    .lzh
  • JITIME.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TDCON32.EXE
    .exe windows:1 windows x86 arch:x86

    5c64bf9d73c5caf91529edeccef7de13


    Headers

    Imports

    Exports

    Sections

  • TDDEBUG.386
  • TDW.EXE
  • TDW.ICO
  • TDWHELP.TDH
  • TDWINST.EXE
  • TDWINST.ICO
  • TDWINTH.DLL
  • WREMOTE.EXE
  • WRSETUP.EXE
  • DISK2/USRGUIDE.PAK
    .lzh
  • ASMPSCL.ASM
  • AVERAGE.ASM
  • BIOS.INC
  • CALCAVG.CPP
  • CALLCT.CPP
  • CASMLINK.ASM
  • COMPROG.ASM
  • CONCISE.ASM
  • COUNT.ASM
  • COUNTADD.ASM
  • COUNTER.CPP
  • COUNTLG.ASM
  • CSPEC.ASM
  • DOS.INC
  • DOTOTAL.ASM
  • ENVSTR.ASM
  • ENVSTR.PAS
  • EXCHMOD.ASM
  • EXCHMOD.PAS
  • EXEPROG.ASM
  • FINDCHAR.ASM
  • HELLO.ASM
  • HEX.ASM
  • HEX.PAS
  • HEXMOD.ASM
  • HEXMOD.PAS
  • KBD.INC
  • LINK2ASM.CPP
  • PRMSTACK.ASM
  • SHOWTOT.CPP
  • SOMESTR.ASM
  • SOMESTR.PAS
  • VAREXCH.ASM
  • VAREXCH.PAS
  • DISK3/ALIASDOS.PAK
    .lzh
  • ALIAS.ASM
  • CPPUSER.CPP
  • LIBRARY.C
  • MAKEFILE
  • NEWUSER.C
  • OLDUSER.C
  • README.TXT
  • DISK3/ALIASWIN.PAK
    .lzh
  • ALIAS.ASM
  • CPPUSER.CPP
  • CPPUSER.DEF
  • LIBRARY.C
  • MAKEFILE
  • NEWUSER.C
  • NEWUSER.DEF
  • OLDUSER.C
  • OLDUSER.DEF
  • README.TXT
  • DISK3/ASMWIN.PAK
    .lzh
  • DISK3/CMD16.PAK
    .lzh
  • DISK3/CMDINC.PAK
    .lzh
  • DISK3/CPUID.PAK
    .lzh
  • DISK3/DISK3.DSK
  • DISK3/DLLWIN.PAK
    .lzh
  • DISK3/FILT.PAK
    .lzh
  • DISK3/GROUPS.PAK
    .lzh
  • DISK3/HEAP.PAK
    .lzh
  • DISK3/SHOW87.PAK
    .lzh
  • DISK3/TA16LIB.PAK
    .lzh
  • DISK3/TA32LIB.PAK
    .lzh
  • DISK3/TASMDOC.PAK
    .lzh
  • DISK3/TD32.PAK
    .lzh
  • DISK3/TDCMD.PAK
    .lzh
  • DISK3/WAP.PAK
    .lzh
  • DISK3/WAP32.PAK
    .lzh
  • DISK3/WHEREIS.PAK
    .lzh
  • DOCS/PASMUG.PDF
    .pdf
  • PATCHES/53_DOS/FILE_ID.DIZ
  • PATCHES/53_DOS/TASM32.EXE
  • PATCHES/53_PATCH/53PATCH.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • PATCHES/53_PATCH/ADD.TXT
  • PATCHES/53_PATCH/BUG1.ASM
  • PATCHES/53_PATCH/BUG2.ASM
  • PATCHES/53_PATCH/BUG3.ASM
  • PATCHES/53_PATCH/BUG4.ASM
  • PATCHES/53_PATCH/BUG5.ASM
  • PATCHES/53_PATCH/BUG6.ASM
  • PATCHES/53_PATCH/BUG7.ASM
  • PATCHES/53_PATCH/BUG8.ASM
  • PATCHES/53_PATCH/FILE_ID.DIZ
  • PATCHES/53_PATCH/TASM.CFG
  • PATCHES/53_WIN/FILE_ID.DIZ
  • PATCHES/53_WIN/TASM32.EXE
    .exe windows:1 windows x86 arch:x86

    a72f701c9ebaab09b86ea6257501eaa2


    Headers

    Imports

    Sections

  • PATCHES/CPPBUILD/INSTALL.BAT
  • PATCHES/CPPBUILD/PATCH.EXE
  • PATCHES/CPPBUILD/TASM32.RTP
  • PATCHES/CPPBUILD/TD32.RTP
  • phatcode.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections