Overview

overview

6

Static

static

3

X0R-USB - ...les.sh

ubuntu-18.04-amd64

3

X0R-USB - ...les.sh

debian-9-armhf

1

X0R-USB - ...les.sh

debian-9-mips

X0R-USB - ...les.sh

debian-9-mipsel

X0R-USB - ...sb.exe

windows7-x64

1

X0R-USB - ...sb.exe

windows10-2004-x64

1

X0R-USB - ...-p.exe

windows7-x64

6

X0R-USB - ...-p.exe

windows10-2004-x64

3

X0R-USB - ...0r.exe

windows7-x64

1

X0R-USB - ...0r.exe

windows10-2004-x64

1

X0R-USB - ...bot.js

windows7-x64

3

X0R-USB - ...bot.js

windows10-2004-x64

3

X0R-USB - ...t.html

windows7-x64

1

X0R-USB - ...t.html

windows10-2004-x64

1

X0R-USB - ...as.bat

windows7-x64

1

X0R-USB - ...as.bat

windows10-2004-x64

1

X0R-USB - ...or.bat

windows7-x64

1

X0R-USB - ...or.bat

windows10-2004-x64

1

X0R-USB - ...or.exe

windows7-x64

1

X0R-USB - ...or.exe

windows10-2004-x64

1

X0R-USB - ...r.html

windows7-x64

1

X0R-USB - ...r.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a246516627f90bfae274929cd16ca449_JaffaCakes118

  • Size

    243KB

  • MD5

    a246516627f90bfae274929cd16ca449

  • SHA1

    37a0cc1335ea0d72698b554705636dfa68c50033

  • SHA256

    65595d687ec4a653d985e5148d56db9c9f632bf55e60f40d901333b7f002735a

  • SHA512

    fc57e01781fcbf8690dcd8cc0cd74a400f8368eba922b8e01e2c02235b5bdb8497be63280c8fc0a780a597c0a52fe45475053137dbe68231420d7cc2c50bb7b7

  • SSDEEP

    6144:JnkDhKDYcCTNboKO3JyAe84M5ZdBCeX/tFQthMJqkTvJhh6434uxf:Jn+6YcCJe4M5tCOPyhM4kdh843vf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • a246516627f90bfae274929cd16ca449_JaffaCakes118
    .zip

    Password: infected

  • X0R-USB - Virus Version - Jan 2009/Compressed/..pass
  • X0R-USB - Virus Version - Jan 2009/Compressed/Release/Release.pass
  • X0R-USB - Virus Version - Jan 2009/Compressed/index.log
  • X0R-USB - Virus Version - Jan 2009/Compressed/xor/xor.pass
  • X0R-USB - Virus Version - Jan 2009/Lastmain.c
  • X0R-USB - Virus Version - Jan 2009/PackFiles.sh
    .sh linux
  • X0R-USB - Virus Version - Jan 2009/Release/scofield-usb.exe
    .exe windows:4 windows x86 arch:x86

    493fadfe59ec1ccb667d3415d5357692


    Headers

    Imports

    Sections

  • X0R-USB - Virus Version - Jan 2009/Release/x0r-p.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • X0R-USB - Virus Version - Jan 2009/Release/x0r.exe
    .exe windows:4 windows x86 arch:x86

    493fadfe59ec1ccb667d3415d5357692


    Headers

    Imports

    Sections

  • X0R-USB - Virus Version - Jan 2009/bot.dsp
  • X0R-USB - Virus Version - Jan 2009/bot.dsw
  • X0R-USB - Virus Version - Jan 2009/bot.ncb
  • X0R-USB - Virus Version - Jan 2009/bot.opt
    .js
  • X0R-USB - Virus Version - Jan 2009/bot.plg
    .html
  • X0R-USB - Virus Version - Jan 2009/main-OK.c
  • X0R-USB - Virus Version - Jan 2009/main.c
  • X0R-USB - Virus Version - Jan 2009/tcp.h
  • X0R-USB - Virus Version - Jan 2009/xor/Release/as.bat
  • X0R-USB - Virus Version - Jan 2009/xor/Release/as.h
  • X0R-USB - Virus Version - Jan 2009/xor/Release/as.txt
  • X0R-USB - Virus Version - Jan 2009/xor/Release/str-OK.h
  • X0R-USB - Virus Version - Jan 2009/xor/Release/str.h
  • X0R-USB - Virus Version - Jan 2009/xor/Release/str.txt
  • X0R-USB - Virus Version - Jan 2009/xor/Release/xor.bat
  • X0R-USB - Virus Version - Jan 2009/xor/Release/xor.exe
    .exe windows:4 windows x86 arch:x86

    1f00c3af08357994bdbe71fdf562c0ea


    Headers

    Imports

    Sections

  • X0R-USB - Virus Version - Jan 2009/xor/xor.c
  • X0R-USB - Virus Version - Jan 2009/xor/xor.dsp
  • X0R-USB - Virus Version - Jan 2009/xor/xor.plg
    .html
  • X0R-USB - Virus Version - Jan 2009/zip.cpp
  • X0R-USB - Virus Version - Jan 2009/zip.h