Overview

overview

10

Static

static

3

10_BLOCK.cmd

windows7-x64

3

10_BLOCK.cmd

windows10-2004-x64

7

10_BLOCK.htm

windows7-x64

1

10_BLOCK.htm

windows10-2004-x64

1

10_OBSOL.vbs

windows7-x64

1

10_OBSOL.vbs

windows10-2004-x64

1

E10BLOK.cmd

windows7-x64

10

E10BLOK.cmd

windows10-2004-x64

10

ELEVAT64.exe

windows7-x64

1

ELEVAT64.exe

windows10-2004-x64

1

ELEVATE.exe

windows7-x64

1

ELEVATE.exe

windows10-2004-x64

1

STARTDNS.cmd

windows7-x64

4

STARTDNS.cmd

windows10-2004-x64

4

STOP!DNS.cmd

windows7-x64

10

STOP!DNS.cmd

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac38bacc61efe264decc42d65542c5ee_JaffaCakes118

  • Size

    53KB

  • MD5

    ac38bacc61efe264decc42d65542c5ee

  • SHA1

    dbb82a0eba7c8462f589b7ecf0d05453750cbb34

  • SHA256

    7467b440647ba267e1dc0bff58cd208511009a370fb7fdd09ecb2ae36e8fccc9

  • SHA512

    0f35078b4ec7a831bf5ef817da157e14b2544582343228dab0bfa99dae7ae997f2150baed4d1d13f1177049cd3530dd0bc31be778ff3a8fff7020349de02cd49

  • SSDEEP

    1536:cNEmcs9M1wKX9AFLZaUJq2ixpZnpA+Ijf:yEmr9I59AVZapsD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ac38bacc61efe264decc42d65542c5ee_JaffaCakes118
    .zip
  • 10_BLOCK.CMD
  • 10_BLOCK.HTM
    .html
  • 10_BLOCK.TXT
  • 10_OBSOL.TXT
    .vbs
  • E10BLOK.CMD
  • ELEVAT64.EXE
    .exe windows:6 windows x64 arch:x64

    4aa28b29f47f3693c0aa9202b02c12c5


    Headers

    Imports

    Sections

  • ELEVATE.EXE
    .exe windows:6 windows x86 arch:x86

    4aa28b29f47f3693c0aa9202b02c12c5


    Headers

    Imports

    Sections

  • ELEVATE.TXT
  • STARTDNS.CMD
  • STOP!DNS.CMD