Overview

overview

3

Static

static

3

Moonbug11/...AD.exe

windows7-x64

Moonbug11/...AD.exe

windows10-2004-x64

Moonbug11/...LE.exe

windows7-x64

Moonbug11/...LE.exe

windows10-2004-x64

Moonbug11/...UNC.js

windows7-x64

3

Moonbug11/...UNC.js

windows10-2004-x64

3

Moonbug11/...CK.exe

windows7-x64

Moonbug11/...CK.exe

windows10-2004-x64

Moonbug11/...RC.com

windows7-x64

Moonbug11/...RC.com

windows10-2004-x64

EICAR.com

windows7-x64

EICAR.com

windows10-2004-x64

EICAR.com

windows7-x64

EICAR.com

windows10-2004-x64

Moonbug11/...FD.com

windows7-x64

Moonbug11/...FD.com

windows10-2004-x64

Moonbug11/...FM.com

windows7-x64

Moonbug11/...FM.com

windows10-2004-x64

Moonbug11/...EN.exe

windows7-x64

3

Moonbug11/...EN.exe

windows10-2004-x64

3

Moonbug11/...LA.exe

windows7-x64

Moonbug11/...LA.exe

windows10-2004-x64

Moonbug11/..._1.exe

windows7-x64

Moonbug11/..._1.exe

windows10-2004-x64

Moonbug11/..._2.exe

windows7-x64

Moonbug11/..._2.exe

windows10-2004-x64

Moonbug11/...LC.exe

windows7-x64

1

Moonbug11/...LC.exe

windows10-2004-x64

1

Moonbug11/...LI.com

windows7-x64

Moonbug11/...LI.com

windows10-2004-x64

Moonbug11/...IN.exe

windows7-x64

Moonbug11/...IN.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    317c6356b04926b4cf107df145289435_JaffaCakes118

  • Size

    1.2MB

  • MD5

    317c6356b04926b4cf107df145289435

  • SHA1

    be77f272d7100e2754116da01024e45abf5f5c92

  • SHA256

    0a44ab477efd83bc0bce8d3ca083aee70b7d05ab4aafe07e6d7cfb27f8764f9a

  • SHA512

    80344e40d598f8ca0aa83668922e66ab01d7245cd10452673bbd1c819546fc77f995aa0a0823b95fc38278e21d0f85256372ebead2462c7491cc6be57d3377ea

  • SSDEEP

    24576:5fDnH1kkzEVNTM404Cir1d/bvySwlphEM5j+wAIjSejcRYm:tL1kkzqNTMfO55b6Vdnj+wAIj3juYm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • EICAR Anti-Malware test file 2 IoCs

Files

  • 317c6356b04926b4cf107df145289435_JaffaCakes118
    .zip
  • Moonbug11/FILE_ID.DIZ
  • Moonbug11/FILE_ID.NFO
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/AVP_BAD/AVP_BAD.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/AVP_BAD/AVP_BAD.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/AVP_BAD/READ.ME
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/FINDFILE/FIND.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/FINDFILE/FINDFILE.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/FINDFILE/FINDFILE.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/FINDFILE/READ.ME
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/FINDFILE/TFUNC.PAS
    .js
  • Moonbug11/MOONBUG.011/APPENDIX.ADD/FINDFILE/WORKING.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.AV/BATCHECK/BATCHECK.CFG
  • Moonbug11/MOONBUG.011/APPENDIX.AV/BATCHECK/BATCHECK.ENG
  • Moonbug11/MOONBUG.011/APPENDIX.AV/BATCHECK/BATCHECK.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.AV/BATCHECK/BATCHECK.TXT
  • Moonbug11/MOONBUG.011/APPENDIX.AV/BATCHECK/FILE_ID.DIZ
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/BASES.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/COMFILE.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/DATE.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/EXEFILE.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/FILELIB.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/FILE_ID.DIZ
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/FIND.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/INFO.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/LIBRARY.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/REDARC.ASM
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/REDARC.COM
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/SERVICE.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/SPECVPP1.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/SPECVPP2.INC
  • Moonbug11/MOONBUG.011/APPENDIX.AV/REDARC/SPECVPP3.INC
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/!COM!1K.COM
    .zip
  • EICAR.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/!COM!1K.ZIP
    .zip
  • EICAR.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/FD.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/FM.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/GEN.EXE
    .exe windows:1 windows x86 arch:x86

    a96d166ab17e011e8049d87211158ae5


    Headers

    Imports

    Sections

  • Moonbug11/MOONBUG.011/APPENDIX.BIN/HLLA.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/HLLA_1.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/HLLA_2.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/HLLC.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Moonbug11/MOONBUG.011/APPENDIX.BIN/HLLI.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/MERLIN.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/MERLIN_0.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/OLGA.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/RBTG.ZIP
    .zip
  • BOMB.EXE
  • BOMB.PAS
  • RBTG.EXE
  • RBTG.INC
  • RBTG.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/ROBOT.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/SOBACHKA.BAT
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/TEST.EXE
    .exe windows:1 windows x86 arch:x86

    a96d166ab17e011e8049d87211158ae5


    Headers

    Imports

    Sections

  • Moonbug11/MOONBUG.011/APPENDIX.BIN/TRIVIAL.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/UUWORM.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/V.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/VP&CVME.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/VPP3.COM
  • Moonbug11/MOONBUG.011/APPENDIX.BIN/VPP4B.COM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/BUFFER.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/BUFFW.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/CODE.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/CODE16.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/DATA.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/DEMO.ASM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/DEMO.COM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/FILE_ID.DIZ
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/HELLO.COM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/HELLOUNP.COM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/LIBRARY.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/MUSOR.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/N.BAT
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/N.COM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/POLY.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/READ.ME
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/BUFFER.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/BUFFW.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/CODE.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/CODE16.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/DATA.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/DEMO.ASM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/DEMO.COM
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/LIBRARY.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/MUSOR.INC
  • Moonbug11/MOONBUG.011/APPENDIX.DEM/VIR/POLY.INC
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/DEMO.VCG/CG16.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/DEMO.VCG/CG16.TPU
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/DEMO.VCG/FILE_ID.DIZ
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/DEMO.VCG/HLL_VCG.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/DEMO.VCG/HLL_VCG.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/DEMO.VCG/TEST.COM
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/ARJ.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/FILEUTIL.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/HLLA_VIR.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/HLLA_VIR.INF
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/HLLA_VIR.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/LOAD.ASM
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/LOAD.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/LZEXE.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/NEWINF.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/NEWINF.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/READ.ME
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/000/STARWAY.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/ARJ.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/FILEUTIL.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/FILE_ID.DIZ
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/HLLA_VIR.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/HLLA_VIR.INF
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/HLLA_VIR.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/LOAD.ASM
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/LOAD.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/LZEXE.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/NEWINF.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/NEWINF.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/PREPARE.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/PREPARE.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/READ.ME
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/001/STARWAY.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/FILEUTIL.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/FILE_ID.DIZ
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/HLLA_VIR.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/HLLA_VIR.INF
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/HLLA_VIR.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/LOAD.ASM
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/LOAD.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/LZEXE.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/NEWINF.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/NEWINF.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/PREPARE.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/PREPARE.PAS
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/RAR.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/READ.ME
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/002/STARWAY.EXE
  • Moonbug11/MOONBUG.011/APPENDIX.RAV/HLLA.BIN/FILE_ID.DIZ
  • Moonbug11/MOONBUG.011/MOONBUG.000
  • Moonbug11/MOONBUG.011/MOONBUG.001
  • Moonbug11/MOONBUG.011/MOONBUG.002
  • Moonbug11/MOONBUG.011/MOONBUG.003
  • Moonbug11/MOONBUG.011/MOONBUG.004
  • Moonbug11/MOONBUG.011/MOONBUG.005
  • Moonbug11/MOONBUG.011/MOONBUG.006
  • Moonbug11/MOONBUG.011/MOONBUG.007
  • Moonbug11/MOONBUG.011/MOONBUG.008
  • Moonbug11/MOONBUG.011/MOONBUG.009
  • Moonbug11/MOONBUG.011/MOONBUG.00A
  • Moonbug11/MOONBUG.011/MOONBUG.00B
  • Moonbug11/MOONBUG.011/MOONBUG.00C
  • Moonbug11/MOONBUG.011/MOONBUG.00D
  • Moonbug11/MOONBUG.011/MOONBUG.00E
  • Moonbug11/MOONBUG.011/MOONBUG.00F
  • Moonbug11/MOONBUG.011/MOONBUG.010
  • Moonbug11/MOONBUG.011/MOONBUG.011
  • Moonbug11/MOONBUG.011/MOONBUG.012
  • Moonbug11/MOONBUG.011/MOONBUG.013
  • Moonbug11/MOONBUG.011/MOONBUG.014
  • Moonbug11/MOONBUG.011/MOONBUG.015
  • Moonbug11/MOONBUG.011/MOONBUG.016