Overview

overview

7

Static

static

3

Encoded_12...fg.exe

windows7-x64

7

Encoded_12...fg.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    29621daecd35f4c6cae0cd34cc535c6a_JaffaCakes118

  • Size

    766KB

  • MD5

    29621daecd35f4c6cae0cd34cc535c6a

  • SHA1

    9dcc243fd8d0894c4b0a98e5221adb6d53f60ce3

  • SHA256

    e5eecb4dcbd3f7545e7670a216f7de5cf5edba5ffc7250f533d3e95588cc56b9

  • SHA512

    7f2ed57fe320b38d24751d1e610d662ebe7618467b2dc42cf431cac745ef18fc264e1adc916e2a3b4d583b633b00afa141bd0ffbb73f7744daa0e9f736ab20f0

  • SSDEEP

    12288:Cy0YuD3lswRU9Dkn+0Iw3Kr3VaJcrk2VgGjtCUZnt+5zAXMmoqMsqOtz80U+46bk:xrUpRU9Dk+Bw3+jrk2/jtTZntIAXM97B

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29621daecd35f4c6cae0cd34cc535c6a_JaffaCakes118
    .rar
  • Encoded_123_lilshizzy 2/Rainstaller.cfg.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/AeroBlur/black_blur.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/AeroBlur/grey_blur.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/AeroBlur/red_blur.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/AeroBlur/white_blur.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/Transparent/black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/Transparent/grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/Transparent/red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Backgrounds/Transparent/white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_black-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_grey-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_red-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_white-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Date/Date_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Horizontal/black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Horizontal/grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Horizontal/red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Horizontal/white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Vertical/black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Vertical/grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Vertical/red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Dividers/Vertical/white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin-box_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin-box_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin-box_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin-box_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin_red2.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_bin_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_meter_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_meter_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_meter_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Recycle/Recycle_meter_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_black_big.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_grey_big.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_red_big.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Time/Time_white_big.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_black-small.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_black_div-btm.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_black_div-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_grey-small.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_grey_div-btm.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_grey_div-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_red-small.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_red_div-btm.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_red_div-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_white-small.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_white_div-btm.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Headers/Weather/Weather_white_div-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/CPU/CPU_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/CPU/CPU_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/CPU/CPU_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/CPU/CPU_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Gmail/Gmail_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Gmail/Gmail_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Gmail/Gmail_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Gmail/Gmail_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/1_Drive/HDD1_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/1_Drive/HDD1_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/1_Drive/HDD1_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/1_Drive/HDD1_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/2_Drives/HDD2_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/2_Drives/HDD2_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/2_Drives/HDD2_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/2_Drives/HDD2_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/3_Drives/HDD3_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/3_Drives/HDD3_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/3_Drives/HDD3_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/HDD/3_Drives/HDD3_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/NowPlaying/Player_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/NowPlaying/Player_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/NowPlaying/Player_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/NowPlaying/Player_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunesArtwork/artwork.jpg
    .jpg
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_black-hide.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_black_small-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_black_small-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_grey-hide.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_grey_small-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_grey_small-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_red-hide.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_red_small-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_red_small-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_white-hide.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_white_small-left.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Music/iTunes/iTunes_white_small-top.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Network/Network_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Network/Network_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Network/Network_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Network/Network_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Power/Power_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Power/Power_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Power/Power_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Power/Power_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/RAM/RAM_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/RAM/RAM_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/RAM/RAM_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/RAM/RAM_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/SWAP/Swap_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/SWAP/Swap_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/SWAP/Swap_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/SWAP/Swap_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Uptime/Uptime_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Uptime/Uptime_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Uptime/Uptime_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Uptime/Uptime_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Weather/Weather_black.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Weather/Weather_grey.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Weather/Weather_red.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Squares/Weather/Weather_white.ini
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Default.inc
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Fonts.inc
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Fonts/Code-Bold.ttf
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Fonts/Code-Light.ttf
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Fonts/ITCAvantGardePro-Bold.ttf
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/encoded_gmail_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/encoded_gmail_02.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_blk_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_blk_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_grey_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_grey_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_red_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_red_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_red_f2.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_wht_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recycle_wht_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_blk_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_blk_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_grey_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_grey_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_red_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_red_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_wht_e.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/recyclebox_wht_f.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_62_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_62blk_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_62red_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_62wht_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_music_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_music_02.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_music_03.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicblk_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicblk_02.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicblk_03.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicblk_04-1.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicblk_04-2.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicgrey_04-1.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicgrey_04-2.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicred_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicred_02.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicred_03.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicred_04-1.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicred_04-2.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicwht_01.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicwht_02.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicwht_03.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicwht_04-1.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Images/square_musicwht_04-2.png
    .png
  • Encoded_123_lilshizzy 2/Skins/Encoded/Variables/Styles.inc
  • Encoded_123_lilshizzy 2/rainmeter___encoded_v1_2_3_by_lilshizzy-d3klh7x.jpg
    .jpg