Overview

overview

3

Static

static

3

PipeCmd.exe

windows7-x64

1

PipeCmd.exe

windows10-2004-x64

1

hscan.exe

windows7-x64

1

hscan.exe

windows10-2004-x64

1

hscangui.exe

windows7-x64

1

hscangui.exe

windows10-2004-x64

1

libmySQL.dll

windows7-x64

3

libmySQL.dll

windows10-2004-x64

3

oncrpc.dll

windows7-x64

1

oncrpc.dll

windows10-2004-x64

1

tools/NTCmd.exe

windows7-x64

1

tools/NTCmd.exe

windows10-2004-x64

1

tools/Sqlcmd.exe

windows7-x64

1

tools/Sqlcmd.exe

windows10-2004-x64

1

tools/cygwinb19.dll

windows7-x64

1

tools/cygwinb19.dll

windows10-2004-x64

1

tools/mysql.exe

windows7-x64

1

tools/mysql.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32e8001b22842d3a47cd137b60c0091a_JaffaCakes118

  • Size

    695KB

  • MD5

    32e8001b22842d3a47cd137b60c0091a

  • SHA1

    bc12ece424b87e88e9f7f8365649d55aa6c5df1d

  • SHA256

    6fd01e7c046a0dbee635b69f5457a6d62405fd16faa30b708b8ecf41847867fd

  • SHA512

    1b67d244face54acf04bcf607202157102df93a585d414426516d8b6f0d4873a2403a88b929c61a2854366f4803e8b73f00ab7fcd9d897cd714bfa6e3315abcc

  • SSDEEP

    12288:yXHubF8ELfKnAKfs36k40/PpzWFeWifBDTqUlblsB42KJoT2FZeXYaztppp:yXAXLfKnuKs/RzWFeWeZTqc5sB42KJoR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 32e8001b22842d3a47cd137b60c0091a_JaffaCakes118
    .zip
  • PipeCmd.exe
    .exe windows:4 windows x86 arch:x86

    16128d6b32aaef62be90549abfbee5dd


    Headers

    Imports

    Sections

  • Readme.txt
  • conf/common.cgi
  • conf/ftp_pass.dic
  • conf/ftp_user.dic
  • conf/imap_pass.dic
  • conf/imap_user.dic
  • conf/ipc_pass.dic
  • conf/ipc_user.dic
  • conf/mssql_pass.dic
  • conf/mssql_user.dic
  • conf/mysql_pass.dic
  • conf/mysql_user.dic
  • conf/nt.cgi
  • conf/pop_pass.dic
  • conf/pop_user.dic
  • conf/rpc.lst
  • conf/telnet_pass.dic
  • conf/telnet_user.dic
  • conf/unix.cgi
  • hscan.exe
    .exe windows:4 windows x86 arch:x86

    a12d43068bb05af9291d3267c70d338d


    Headers

    Imports

    Sections

  • hscanconf.ini
  • hscangui.exe
    .exe windows:4 windows x86 arch:x86

    9888023affc8c2ea341a5eaa340aa329


    Headers

    Imports

    Sections

  • libmySQL.dll
    .dll windows:4 windows x86 arch:x86

    006c49710d9884ca7c15f8d95eeb51d4


    Headers

    Imports

    Exports

    Sections

  • oncrpc.dll
    .dll windows:1 windows x86 arch:x86

    2125b46849b9f195b9b037623de522f2


    Headers

    Imports

    Exports

    Sections

  • plugin/fpe2k.hsp
  • plugin/luenum.hsp
  • plugin/qpop.hsp
  • plugin/sunftp.hsp
  • tools/NTCmd.exe
    .exe windows:4 windows x86 arch:x86

    73767e539e9720aff83d4da1db391803


    Headers

    Imports

    Sections

  • tools/Sqlcmd.exe
    .exe windows:4 windows x86 arch:x86

    794cb112594371ed14da81bc0592ca2a


    Headers

    Imports

    Sections

  • tools/cygwinb19.dll
    .dll windows:4 windows x86 arch:x86

    0f068abeaa3b9ee1380205dbc1e98308


    Headers

    Imports

    Exports

    Sections

  • tools/mysql.exe
    .exe windows:4 windows x86 arch:x86

    eebae69bbcdbf0cf9d738e09705f99ee


    Headers

    Imports

    Sections