2740f1cfa443d89e721387dcc1a72158_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2740f1cfa443d89e721387dcc1a72158_JaffaCakes118
Size

911KB
MD5

2740f1cfa443d89e721387dcc1a72158
SHA1

366a888b3b9d1d13e529b0c309acdfad6043c144
SHA256

ceabfafe0697e5060e7bbaa714248382b863739c08579bf9e9fe5862aa44fe85
SHA512

c72091a419db18a09c804a65d5b01912839d99e1bf25178f9e8b68a4b7e68c79f5611094597729a51a90e5b6fd296d0e729cbed6b2ffc95801aec686d430715d
SSDEEP

24576:QUNsNbenhyl2L8piOKgA+Zyf0GbjOSZZ6WyWzOl:QUsNbene2L8pO8yf0GG9WhOl

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack006/killbill2.exe	upx

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack003/I-Worm Sarnoth by Azag on MAY2004/Sarnoth.exe
unpack004/mbh.exe
unpack005/MBH.exe
unpack006/MBH.exe
unpack006/killbill2.exe
unpack007/out.upx
unpack008/mbh2.exe
unpack009/mbhz/mbhz.exe

Files

2740f1cfa443d89e721387dcc1a72158_JaffaCakes118
.zip
azag vx collection 2/READ ME FIRST (Terms of Agreement).txt
azag vx collection 2/azag_vx_coll2/(I-Worm.Thonic.a) aka- NamelessMist.zip
azag vx collection 2/azag_vx_coll2/(MS-DOS Virus by Azag) DUMBFUCK.zip
azag vx collection 2/azag_vx_coll2/(VX by Azag) W32.CompUSAsux.zip
azag vx collection 2/azag_vx_coll2/Azags VBS.Ickly.a.zip
azag vx collection 2/azag_vx_coll2/Azags VBS.Ilicky.b.zip
azag vx collection 2/azag_vx_coll2/Azags VBS.Ilicky.c.fix.zip
.zip
Azags VBS.Ilicky.c.fix.vbs
.vbs
azag vx collection 2/azag_vx_coll2/I-Worm Sarnoth n (SWF hide version by Azag).zip
.zip
I-Worm Sarnoth by Azag on MAY2004/Sarnoth.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
azag vx collection 2/azag_vx_coll2/I-Worm.MBH by Azag.zip
.zip
mbh.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
azag vx collection 2/azag_vx_coll2/I-Worm.MBH.CERNKILL Final SE ( by Azag).zip
.zip
MBH.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
azag vx collection 2/azag_vx_coll2/I-Worm.MBH.Final by Azag.zip
.zip
MBH.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
killbill2.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
azag vx collection 2/azag_vx_coll2/I-Worm.MBH2 by Azag.zip
.zip
mbh2.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
azag vx collection 2/azag_vx_coll2/I-Worm.MBHz by Azag.zip
.zip
mbhz/mbhz.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
azag vx collection 2/azag_vx_coll2/I-Worm.SarnothSE (Hidden).zip
.zip
azag vx collection 2/azag_vx_coll2/I-Worm.SasserPatcher by Azag.zip
.zip
azag vx collection 2/azag_vx_coll2/I-Worm.Sloppy2nds by Azag.zip
.zip
azag vx collection 2/azag_vx_coll2/I-Worm.Thonic.c (maybe not detected yet).zip
.zip
azag vx collection 2/azag_vx_coll2/I-Worm.Thonic99 (by AzagTH0TH).zip
.zip
azag vx collection 2/azag_vx_coll2/MacroVirus.SuicidalTndeCz by Azag.zip
.zip
azag vx collection 2/azag_vx_coll2/URAVARU.zip
.zip
azag vx collection 2/azag_vx_coll2/VBS.SleepyPc (by Azag).zip
.zip
azag vx collection 2/azag_vx_coll2/W32.AzagChaos101 (NO DETECT --Note IO ERROR HELL).zip
.zip
azag vx collection 2/azagvxcoll2.jpg
.jpg
.txt

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 26KB - Virtual size: 25KB

DATA Size: 512B - Virtual size: 208B

BSS Size: - Virtual size: 1.0MB

.idata Size: 2KB - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 512B

Headers

File Characteristics

Sections

CODE Size: 18KB - Virtual size: 18KB

DATA Size: 512B - Virtual size: 204B

BSS Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 512B

Headers

File Characteristics

Sections

CODE Size: 9KB - Virtual size: 8KB

DATA Size: 512B - Virtual size: 164B

BSS Size: - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 750B

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 1024B - Virtual size: 768B

.rsrc Size: 512B - Virtual size: 512B

Headers

File Characteristics

Sections

CODE Size: 9KB - Virtual size: 8KB

DATA Size: 512B - Virtual size: 164B

BSS Size: - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 750B

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 1024B - Virtual size: 768B

.rsrc Size: 512B - Virtual size: 512B

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 16KB

UPX1 Size: 2KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 700B

.rsrc Size: 1024B - Virtual size: 928B

Headers

File Characteristics

Sections

CODE Size: 9KB - Virtual size: 8KB

DATA Size: 512B - Virtual size: 164B

BSS Size: - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 750B

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 1024B - Virtual size: 768B

.rsrc Size: 512B - Virtual size: 512B

Headers

File Characteristics

Sections

CODE Size: 23KB - Virtual size: 23KB

DATA Size: 512B - Virtual size: 208B

BSS Size: - Virtual size: 1.0MB

.idata Size: 2KB - Virtual size: 1KB

.tls Size: - Virtual size: 8B

CODE
Size: 26KB - Virtual size: 25KB

DATA
Size: 512B - Virtual size: 208B

BSS
Size: - Virtual size: 1.0MB

.idata
Size: 2KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 512B

CODE
Size: 18KB - Virtual size: 18KB

DATA
Size: 512B - Virtual size: 204B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 512B

CODE
Size: 9KB - Virtual size: 8KB

DATA
Size: 512B - Virtual size: 164B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 750B

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1024B - Virtual size: 768B

.rsrc
Size: 512B - Virtual size: 512B

CODE
Size: 9KB - Virtual size: 8KB

DATA
Size: 512B - Virtual size: 164B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 750B

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1024B - Virtual size: 768B

.rsrc
Size: 512B - Virtual size: 512B

UPX0
Size: - Virtual size: 16KB

UPX1
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 700B

.rsrc
Size: 1024B - Virtual size: 928B

CODE
Size: 9KB - Virtual size: 8KB

DATA
Size: 512B - Virtual size: 164B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 750B

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1024B - Virtual size: 768B

.rsrc
Size: 512B - Virtual size: 512B

CODE
Size: 23KB - Virtual size: 23KB

DATA
Size: 512B - Virtual size: 208B

BSS
Size: - Virtual size: 1.0MB

.idata
Size: 2KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 512B