9968fb6ee18934c2afc193425578e488_JaffaCakes118
- SHA256 f646652723994218114d688def2e56f990a8efb100871b691b41ae4c41582176
Overview
overview
8Static
static
7bin/admin.bat
windows7-x64
1bin/admin.bat
windows10-2004-x64
7bin/instsvc.bat
windows7-x64
8bin/instsvc.bat
windows10-2004-x64
8bin/ping.bat
windows7-x64
1bin/ping.bat
windows10-2004-x64
7bin/ping.sh
ubuntu-18.04-amd64
1bin/ping.sh
debian-9-armhf
1bin/ping.sh
debian-9-mips
bin/ping.sh
debian-9-mipsel
bin/reset-acl.bat
windows7-x64
1bin/reset-acl.bat
windows10-2004-x64
7bin/reset-acl.sh
ubuntu-18.04-amd64
1bin/reset-acl.sh
debian-9-armhf
1bin/reset-acl.sh
debian-9-mips
bin/reset-acl.sh
debian-9-mipsel
bin/reset-pw.bat
windows7-x64
1bin/reset-pw.bat
windows10-2004-x64
7bin/reset-pw.sh
ubuntu-18.04-amd64
1bin/reset-pw.sh
debian-9-armhf
1bin/reset-pw.sh
debian-9-mips
bin/reset-pw.sh
debian-9-mipsel
bin/shutdown.bat
windows7-x64
1bin/shutdown.bat
windows10-2004-x64
7bin/shutdown.sh
ubuntu-18.04-amd64
1bin/shutdown.sh
debian-9-armhf
1bin/shutdown.sh
debian-9-mips
bin/shutdown.sh
debian-9-mipsel
bin/startup.bat
windows7-x64
1bin/startup.bat
windows10-2004-x64
7bin/startup.sh
ubuntu-18.04-amd64
1bin/startup.sh
debian-9-armhf
1Behavioral task
behavioral1
Sample
bin/admin.bat
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
bin/admin.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
bin/instsvc.bat
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
bin/instsvc.bat
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
bin/ping.bat
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
bin/ping.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
bin/ping.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral8
Sample
bin/ping.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral9
Sample
bin/ping.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral10
Sample
bin/ping.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral11
Sample
bin/reset-acl.bat
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
bin/reset-acl.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
bin/reset-acl.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral14
Sample
bin/reset-acl.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral15
Sample
bin/reset-acl.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral16
Sample
bin/reset-acl.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral17
Sample
bin/reset-pw.bat
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
bin/reset-pw.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
bin/reset-pw.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral20
Sample
bin/reset-pw.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral21
Sample
bin/reset-pw.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral22
Sample
bin/reset-pw.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral23
Sample
bin/shutdown.bat
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
bin/shutdown.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
bin/shutdown.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral26
Sample
bin/shutdown.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral27
Sample
bin/shutdown.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral28
Sample
bin/shutdown.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral29
Sample
bin/startup.bat
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
bin/startup.bat
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
bin/startup.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral32
Sample
bin/startup.sh
Resource
debian9-armhf-20240418-en
| resource | yara_rule |
|---|---|
| static1/unpack001/nxwrapper.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/nxwrapper.exe |
| unpack003/out.upx |
| unpack001/prunsrv.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=19, version=8034,
count=2, id=12, version=7291,
count=11, id=10, version=8047,
count=1, id=14, version=7299,
count=3, id=4, version=8047,
count=58, id=1, productName=Unmarked objects,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=19, version=8034,
count=2, id=12, version=7291,
count=11, id=10, version=8047,
count=1, id=14, version=7299,
count=3, id=4, version=8047,
count=58, id=1, productName=Unmarked objects,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=288, id=1, productName=Unmarked objects,
count=80, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=126, version=50727,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,