General

  • Target

    b4e26311fbe63ad656a96fa8d9c94274_JaffaCakes118

  • Size

    6.8MB

  • MD5

    b4e26311fbe63ad656a96fa8d9c94274

  • SHA1

    62b74cdb79c945b9fab16560047a02ebe92ba449

  • SHA256

    f8a7421e8b85325c9b01b23c5b2b0b1fd774fcd4b10b747e4e91cd789c936654

  • SHA512

    ebb32a9e73000759d4f62e915cc4db9df342e8e63c18f7245a7349ea5451f86f7e1026bf1ebe10cbcbc928d8b8e1429bd28c8e386b60c4c24cb6b6f6fe377706

  • SSDEEP

    196608:uNruDcl9vcRYQ7Y+hKLknBF2Ea2MX7ayw:uBqcl9vcRfZhKLknqEa3Dw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 45 IoCs

    Checks for missing Authenticode signature.

Files

  • b4e26311fbe63ad656a96fa8d9c94274_JaffaCakes118
    .zip
  • Doublepulsar-1.3.1.exe
    .exe windows:5 windows x86 arch:x86

    2ef98d303937b8d317d5ce3aea3e144e


    Headers

    Imports

    Sections

  • Eternalblue-2.2.0.exe
    .exe windows:5 windows x86 arch:x86

    43ab0829235f0f3299a0baee637645e2


    Headers

    Imports

    Sections

  • _pytrch.pyd
    .dll windows:5 windows x86 arch:x86

    1c7426faaa158f59a13ac3b5eb32ea6f


    Headers

    Imports

    Exports

    Sections

  • adfw-2.dll
    .dll windows:5 windows x86 arch:x86

    8b7d25d38cf306a79459f3847affe0c7


    Headers

    Imports

    Exports

    Sections

  • adfw.dll
    .dll windows:4 windows x86 arch:x86

    715742f34145e42b16e3c177441ea1bf


    Headers

    Imports

    Exports

    Sections

  • cnli-0.dll
    .dll windows:4 windows x86 arch:x86

    c30180a2e3a81b71b6d916caad631d31


    Headers

    Imports

    Exports

    Sections

  • cnli-1.dll
    .dll windows:5 windows x86 arch:x86

    a482b407319dc74133dc3d7a0212f626


    Headers

    Imports

    Exports

    Sections

  • coli-0.dll
    .dll windows:5 windows x86 arch:x86

    3bdaf0330fb6625e9822b4db8158a8ba


    Headers

    Imports

    Exports

    Sections

  • crli-0.dll
    .dll windows:5 windows x86 arch:x86

    31a3d927d0773eea73787c46f29a287b


    Headers

    Imports

    Exports

    Sections

  • dmgd-1.dll
    .dll windows:5 windows x86 arch:x86

    c09b9940e60b0e64cc45f00fe08e942f


    Headers

    Imports

    Exports

    Sections

  • dmgd-4.dll
    .dll windows:5 windows x86 arch:x86

    4edfb3614d85009edda4e6c7c687371e


    Headers

    Imports

    Exports

    Sections

  • esco-0.dll
    .dll windows:5 windows x86 arch:x86

    d58bd2f98f48b8865d93d6cc74357287


    Headers

    Imports

    Exports

    Sections

  • exma-1.dll
    .dll windows:5 windows x86 arch:x86

    38335bfed05954b26590a75c4458da60


    Headers

    Imports

    Exports

    Sections

  • exma.dll
    .dll windows:4 windows x86 arch:x86

    a40a7e84d80ee58f1d9b367ea65775d3


    Headers

    Imports

    Exports

    Sections

  • iconv.dll
    .dll windows:5 windows x86 arch:x86

    b1120ee66ca68cd85b2a07dc10563ac4


    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:5 windows x86 arch:x86

    30d6e82d613a55c4e1fac27ebbaa1757


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    ab3711ec11b2005ba9f89a2f4ae2937b


    Headers

    Imports

    Exports

    Sections

  • libiconv-2.dll
    .dll windows:4 windows x86 arch:x86

    dd86f097485a761cdaf285b0f147c8fc


    Headers

    Imports

    Exports

    Sections

  • libxml2.dll
    .dll windows:5 windows x86 arch:x86

    c17f3a8fe5a31151ab2da99abee9c23c


    Headers

    Imports

    Exports

    Sections

  • payload32.dll
    .dll windows:4 windows x86 arch:x86

    f77daf22af8cb286826cac53ccc4a812


    Headers

    Imports

    Exports

    Sections

  • payload64.dll
    .dll windows:4 windows x64 arch:x64

    aa33181d55eb211fa5baca000bce9ca7


    Headers

    Imports

    Exports

    Sections

  • pcla-0.dll
    .dll windows:5 windows x86 arch:x86

    fd65062fb78dffef07ac3b040945c3c9


    Headers

    Imports

    Exports

    Sections

  • pcre-0.dll
    .dll windows:5 windows x86 arch:x86

    c04ae93ea53bc16eec23be7c255c7200


    Headers

    Imports

    Exports

    Sections

  • pcrecpp-0.dll
    .dll windows:5 windows x86 arch:x86

    b7979a859ceaa2d1b5ac69eb5a7f4ae5


    Headers

    Imports

    Exports

    Sections

  • pcreposix-0.dll
    .dll windows:5 windows x86 arch:x86

    ce65e93ba01df47b38f71d9ec5ed670a


    Headers

    Imports

    Exports

    Sections

  • posh-0.dll
    .dll windows:5 windows x86 arch:x86

    3238dd5467a491407079286b75fed933


    Headers

    Imports

    Exports

    Sections

  • posh.dll
    .dll windows:4 windows x86 arch:x86

    5baac45eab5a7941d7922ea469693a01


    Headers

    Imports

    Exports

    Sections

  • pytrch.py
  • pytrch.pyc
  • riar-2.dll
    .dll windows:4 windows x86 arch:x86

    26e230dbe5b5143dd3b386c2471fb0e9


    Headers

    Imports

    Exports

    Sections

  • riar.dll
    .dll windows:4 windows x86 arch:x86

    a25bf667109022283b937196e906f722


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    97a700de1687fd1cc15ee2d6e2e3a134


    Headers

    Imports

    Exports

    Sections

  • tibe-1.dll
    .dll windows:4 windows x86 arch:x86

    005f06312c1d74ecd65c12427c9d642a


    Headers

    Imports

    Exports

    Sections

  • tibe-2.dll
    .dll windows:5 windows x86 arch:x86

    bf232b241eab6d3f1724ea6a36af0cbb


    Headers

    Imports

    Exports

    Sections

  • tibe.dll
    .dll windows:4 windows x86 arch:x86

    b8d8296e73d3c629533f993549af998f


    Headers

    Imports

    Exports

    Sections

  • trch-0.dll
    .dll windows:4 windows x86 arch:x86

    9275408cb68bb6751faa4933679e970e


    Headers

    Imports

    Exports

    Sections

  • trch-1.dll
    .dll windows:5 windows x86 arch:x86

    e566b5e1afbaca6e9905feda4cf65fa9


    Headers

    Imports

    Exports

    Sections

  • trch.dll
    .dll windows:4 windows x86 arch:x86

    82522dcb71a53795c59c7027026f6528


    Headers

    Imports

    Exports

    Sections

  • trfo-0.dll
    .dll windows:4 windows x86 arch:x86

    3260c253d9440b22219a68c1b89be3f5


    Headers

    Imports

    Exports

    Sections

  • trfo-2.dll
    .dll windows:5 windows x86 arch:x86

    5f4323fd2ad75a83e642205dc50294b4


    Headers

    Imports

    Exports

    Sections

  • trfo.dll
    .dll windows:4 windows x86 arch:x86

    59fe168152c123880010c5a1b5bcb148


    Headers

    Imports

    Exports

    Sections

  • tucl-1.dll
    .dll windows:5 windows x86 arch:x86

    b0f67a582b3891cfaf10698b6300d855


    Headers

    Imports

    Exports

    Sections

  • tucl.dll
    .dll windows:4 windows x86 arch:x86

    374a65694dcbdf9256b8b76b3fae34f9


    Headers

    Imports

    Exports

    Sections

  • ucl.dll
    .dll windows:5 windows x86 arch:x86

    33ac1cb1711de5488c50eafd916d2ad2


    Headers

    Imports

    Exports

    Sections

  • xdvl-0.dll
    .dll .js windows:5 windows x86 arch:x86 polyglot

    477c8eaf510bb0844ff2d9435002bda8


    Headers

    Imports

    Exports

    Sections

  • zibe.dll
    .dll windows:5 windows x86 arch:x86

    5168f45ae568a7d685ab2d696b88a528


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:5 windows x86 arch:x86

    78d12b81ee403179e41a0e557321f4fd


    Headers

    Imports

    Exports

    Sections