Overview

overview

3

Static

static

3

casper/HOOK.html

windows7-x64

1

casper/HOOK.html

windows10-2004-x64

1

spooky/Box.exe

windows7-x64

1

spooky/Box.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    224a786ee1dbdec9461eb715511d236a_JaffaCakes118

  • Size

    66KB

  • MD5

    224a786ee1dbdec9461eb715511d236a

  • SHA1

    8483b6c5ef5a715d261f6998c2329872b2baf736

  • SHA256

    4395246f5c6a239f15fe95fbcbe6da5ee7645d07d7a15216f757a1f842d205dc

  • SHA512

    de3b2fac71d2f5a61384aba9bf6f611757a9faa625f2a057c2de19fb49f9ff6e4e8c381781f84c93269f14a7543efb1e80d8fd8f8145752aa4ef5a3735e7bd7a

  • SSDEEP

    1536:9MuTHR0GvuTlnF9hMqZmBU6AjD4UK8uvDkK/RSXMJRHqH:9/GhDE8EAK/RSXMJRHqH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 224a786ee1dbdec9461eb715511d236a_JaffaCakes118
    .rar
  • README.txt
  • casper/CASPER.CPP
  • casper/HOOK.DSP
  • casper/HOOK.DSW
  • casper/HOOK.NCB
  • casper/HOOK.OPT
  • casper/HOOK.PLG
    .html
  • casper/PSAPI.H
  • casper/casper_inject.cpp
  • casper/casper_inject.h
  • casper/casper_trojan.cpp
  • casper/casper_trojan.h
  • casper/casper_utils.cpp
  • casper/casper_utils.h
  • spooky/Box.exe
    .exe windows:4 windows x86 arch:x86

    0bdf5ffc7aee9bf9d7f357ece30e623c


    Headers

    Imports

    Sections

  • spooky/MECHANT/CMD.PHP
  • spooky/MECHANT/CMD.TXT
  • spooky/MECHANT/LOG.PHP
  • spooky/MECHANT/UPTEST.PHP