Overview
overview
1Static
static
1DM 4.4.bat
windows7-x64
1DM 4.4.bat
windows10-2004-x64
1sample #1/...us.vbs
windows7-x64
1sample #1/...us.vbs
windows10-2004-x64
1sample #1/...us.vbs
windows7-x64
1sample #1/...us.vbs
windows10-2004-x64
1sample #2/...us.vbs
windows7-x64
1sample #2/...us.vbs
windows10-2004-x64
1sample #2/...us.vbs
windows7-x64
1sample #2/...us.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
DM 4.4.bat
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
DM 4.4.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
sample #1/batvirus.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
sample #1/batvirus.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
sample #1/batvirus.vbs
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
sample #1/batvirus.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
sample #2/batvirus.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
sample #2/batvirus.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
sample #2/batvirus.vbs
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
sample #2/batvirus.vbs
Resource
win10v2004-20240709-en
General
-
Target
31543ab9f1141555d470d3ed0050aa75_JaffaCakes118
-
Size
24KB
-
MD5
31543ab9f1141555d470d3ed0050aa75
-
SHA1
046a37d9bd36929d5b1354afb56159e8d676f5da
-
SHA256
ac59b657d5fd0bd668250060255f05705d221626d18ff8a966a1d5b268a6a17b
-
SHA512
51e86717e5d1deea5aacde157e8667316c2e1f11493ea4cd7108c3a9d8b4a6a90db1cda7fecc1f3379abd1965f9700748b1d192fa226c6c6dbf1e234c1f56c01
-
SSDEEP
768:KJxeK/Ta0K2Pk+4gsZkOhw8UWZ7W3NGafUQGn:Q1/TjPkVDOeOdUQa
Malware Config
Signatures
-
EICAR Anti-Malware test file 1 IoCs
resource yara_rule static1/unpack001/sample #2/batvirus.txt eicar_test_file
Files
-
31543ab9f1141555d470d3ed0050aa75_JaffaCakes118.zip
-
DM 4.4.bat.bat .vbs
-
DM icon.ico
-
history.nfo
-
readme.txt
-
sample #1/batvirus.txt.vbs
-
sample #1/batvirus.vbs.vbs
-
sample #2/batvirus.txt.vbs
-
sample #2/batvirus.vbs.vbs