General

  • Target

    374006ee9ab659d9b22175cd957fa09f_JaffaCakes118

  • Size

    61KB

  • MD5

    374006ee9ab659d9b22175cd957fa09f

  • SHA1

    36666c03409468029ef16da27bf2b7081c21c9dd

  • SHA256

    a8330e15e2fa8dc82995143a7f731a8cf385b218b4c0d947ba9d161802f62456

  • SHA512

    31b1b1ebfa08a4ea68148c653c9b397f3af2f9e5fe8342688feaf08898eaa03ec2d9b5dfc95eafe61da18338b7164a8b5ae90c559eacc75656b88757a5973983

  • SSDEEP

    1536:B+cTA0WHr4B9/Z4ZIp+uSHK389TAe+nHXCqird3qhx+:Xs0WHKYZhrpAe+nHXCqipis

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 374006ee9ab659d9b22175cd957fa09f_JaffaCakes118
    .rar
  • Api.bas
  • Executable/Log.log
  • Executable/Webserver.ini
  • Executable/addguest.html
    .html
  • Executable/counter.ini
  • Executable/download.zip
    .zip
  • Readme.txt
  • Executable/index.html
    .html
  • Executable/internal.html
    .html
  • Executable/pws.exe
    .exe windows:4 windows x86 arch:x86

    4412766e4af02f1bc86060b1d7b81a20


    Headers

    Imports

    Sections

  • Executable/下载说明.htm
    .html .js polyglot
  • Log.log
  • counter.ini
  • frmAbout.frm
  • frmAbout.frx
  • frmDirChoose.frm
  • frmDirChoose.frx
  • frmMain.frm
    .vbs
  • frmMain.frx
  • html_data.bas
    .vbs
  • http_cmds.bas
  • index.html
    .html
  • other.bas
    .vbs
  • prjWebserver.vbp
  • prjWebserver.vbw
  • 下载说明.htm
    .html .js polyglot