General

  • Target

    8f11ce9b03acf4558b995b78c8d915b2_JaffaCakes118

  • Size

    1.0MB

  • MD5

    8f11ce9b03acf4558b995b78c8d915b2

  • SHA1

    e0e6aabbf56bc1266784df634470ce2068810529

  • SHA256

    447948e43f007a69d2046985a2d23a6d85379b184d48f70877dc3eed547e3511

  • SHA512

    a93c7c59c33bbdae5d0944e5881ceca343b50f70e9e170907acd8b3873e0255cef1b502eb83e0d8ca8c66784c6f1ed37a97e86ecb2a6e45f2472d2120dfc6a9e

  • SSDEEP

    24576:/h6Meicmp5swu48Az6qSWNkb3fJG9VWWeinnCdXX:56M0mp5NuAziWWjf03WTbH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f11ce9b03acf4558b995b78c8d915b2_JaffaCakes118
    .xz
  • 8f11ce9b03acf4558b995b78c8d915b2_JaffaCakes118
    .tar
  • usr/lib/debug/bin/rpm.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/cygrpm-3.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/cygrpmbuild-3.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/cygrpmio-3.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/cygrpmsign-3.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpm2archive.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpm2cpio.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpmbuild.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpmdb.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpmgraph.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpmkeys.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpmsign.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/bin/rpmspec.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/lib/python2.7/site-packages/rpm/_rpm.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/lib/python2.7/site-packages/rpm/_rpmb.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/lib/python2.7/site-packages/rpm/_rpms.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/lib/rpm-plugins/syslog.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/lib/rpm-plugins/systemd_inhibit.dll.dbg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/lib/debug/usr/lib/rpm/rpmdeps.exe.dbg
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • usr/src/debug/rpm-4.12.0-1/build/build.c
  • usr/src/debug/rpm-4.12.0-1/build/expression.c
  • usr/src/debug/rpm-4.12.0-1/build/files.c
  • usr/src/debug/rpm-4.12.0-1/build/misc.c
  • usr/src/debug/rpm-4.12.0-1/build/pack.c
  • usr/src/debug/rpm-4.12.0-1/build/parseBuildInstallClean.c
  • usr/src/debug/rpm-4.12.0-1/build/parseChangelog.c
  • usr/src/debug/rpm-4.12.0-1/build/parseDescription.c
  • usr/src/debug/rpm-4.12.0-1/build/parseFiles.c
  • usr/src/debug/rpm-4.12.0-1/build/parsePolicies.c
  • usr/src/debug/rpm-4.12.0-1/build/parsePreamble.c
  • usr/src/debug/rpm-4.12.0-1/build/parsePrep.c
  • usr/src/debug/rpm-4.12.0-1/build/parseReqs.c
  • usr/src/debug/rpm-4.12.0-1/build/parseScript.c
  • usr/src/debug/rpm-4.12.0-1/build/parseSpec.c
  • usr/src/debug/rpm-4.12.0-1/build/policies.c
  • usr/src/debug/rpm-4.12.0-1/build/reqprov.c
  • usr/src/debug/rpm-4.12.0-1/build/rpmfc.c
  • usr/src/debug/rpm-4.12.0-1/build/spec.c
  • usr/src/debug/rpm-4.12.0-1/cliutils.c
  • usr/src/debug/rpm-4.12.0-1/include/rpm/rpmstring.h
  • usr/src/debug/rpm-4.12.0-1/lib/backend/db3.c
    .vbs
  • usr/src/debug/rpm-4.12.0-1/lib/backend/dbconfig.c
  • usr/src/debug/rpm-4.12.0-1/lib/backend/dbiset.c
    .vbs
  • usr/src/debug/rpm-4.12.0-1/lib/cpio.c
  • usr/src/debug/rpm-4.12.0-1/lib/depends.c
  • usr/src/debug/rpm-4.12.0-1/lib/formats.c
  • usr/src/debug/rpm-4.12.0-1/lib/fprint.c
  • usr/src/debug/rpm-4.12.0-1/lib/fsm.c
  • usr/src/debug/rpm-4.12.0-1/lib/header.c
  • usr/src/debug/rpm-4.12.0-1/lib/headerfmt.c
  • usr/src/debug/rpm-4.12.0-1/lib/headerutil.c
  • usr/src/debug/rpm-4.12.0-1/lib/legacy.c
  • usr/src/debug/rpm-4.12.0-1/lib/manifest.c
  • usr/src/debug/rpm-4.12.0-1/lib/order.c
  • usr/src/debug/rpm-4.12.0-1/lib/package.c
  • usr/src/debug/rpm-4.12.0-1/lib/poptALL.c
  • usr/src/debug/rpm-4.12.0-1/lib/poptI.c
  • usr/src/debug/rpm-4.12.0-1/lib/poptQV.c
  • usr/src/debug/rpm-4.12.0-1/lib/psm.c
  • usr/src/debug/rpm-4.12.0-1/lib/query.c
  • usr/src/debug/rpm-4.12.0-1/lib/relocation.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmal.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmchecksig.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmchroot.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmdb.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmds.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmfi.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmfs.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmgi.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmhash.C
  • usr/src/debug/rpm-4.12.0-1/lib/rpminstall.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmlead.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmliblua.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmlock.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmplugins.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmprob.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmps.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmrc.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmscript.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmtd.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmte.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmts.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmug.c
  • usr/src/debug/rpm-4.12.0-1/lib/rpmvercmp.c
  • usr/src/debug/rpm-4.12.0-1/lib/signature.c
  • usr/src/debug/rpm-4.12.0-1/lib/tagexts.c
  • usr/src/debug/rpm-4.12.0-1/lib/tagname.c
  • usr/src/debug/rpm-4.12.0-1/lib/transaction.c
  • usr/src/debug/rpm-4.12.0-1/lib/verify.c
  • usr/src/debug/rpm-4.12.0-1/luaext/lposix.c
  • usr/src/debug/rpm-4.12.0-1/luaext/lrexlib.c
  • usr/src/debug/rpm-4.12.0-1/luaext/modemuncher.c
  • usr/src/debug/rpm-4.12.0-1/misc/fnmatch.c
  • usr/src/debug/rpm-4.12.0-1/misc/fts.c
  • usr/src/debug/rpm-4.12.0-1/plugins/syslog.c
  • usr/src/debug/rpm-4.12.0-1/plugins/systemd_inhibit.c
  • usr/src/debug/rpm-4.12.0-1/python/header-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmarchive-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmbmodule.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmds-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmfd-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmfi-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmfiles-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmii-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmkeyring-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmmacro-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmmi-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmmodule.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmps-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmsmodule.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmstrpool-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmtd-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmte-py.c
  • usr/src/debug/rpm-4.12.0-1/python/rpmts-py.c
  • usr/src/debug/rpm-4.12.0-1/python/spec-py.c
  • usr/src/debug/rpm-4.12.0-1/rpm2archive.c
  • usr/src/debug/rpm-4.12.0-1/rpm2cpio.c
  • usr/src/debug/rpm-4.12.0-1/rpmbuild.c
  • usr/src/debug/rpm-4.12.0-1/rpmdb.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/argv.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/base64.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/digest.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/digest_nss.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/macro.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmfileutil.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmglob.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmhook.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmio.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmkeyring.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmlog.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmlua.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmmalloc.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmpgp.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmsq.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmstring.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmstrpool.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/rpmsw.c
  • usr/src/debug/rpm-4.12.0-1/rpmio/url.c
  • usr/src/debug/rpm-4.12.0-1/rpmkeys.c
  • usr/src/debug/rpm-4.12.0-1/rpmqv.c
  • usr/src/debug/rpm-4.12.0-1/rpmsign.c
  • usr/src/debug/rpm-4.12.0-1/rpmspec.c
  • usr/src/debug/rpm-4.12.0-1/sign/rpmgensig.c
  • usr/src/debug/rpm-4.12.0-1/tools/rpmdeps.c
  • usr/src/debug/rpm-4.12.0-1/tools/rpmgraph.c