General

  • Target

    397e4c5334d983cc15297445fb4bb7d5_JaffaCakes118

  • Size

    3.3MB

  • MD5

    397e4c5334d983cc15297445fb4bb7d5

  • SHA1

    42b9562487cedf9927961636ea02b70e50019a82

  • SHA256

    1cf5cf01e667d53ce89bd3ab5d90fd1bcce8d5107658a7e21c768d377eec0ab9

  • SHA512

    b8390c14c8a6ad6b6bb0a77feb58d12948d437ed8d25b5bb73a0d408e6a5301b7c797c0d98e8aa1ac387dffb84e5c868a3a4bc896c246f7af64ac53510ded9f0

  • SSDEEP

    98304:2qKO1xSwIoUdoDICGD+to8NL9TsOuMkROeSQfwBOks:xNx3lUiICCuLuvNGEd

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 397e4c5334d983cc15297445fb4bb7d5_JaffaCakes118
    .rar
  • norton/28-4-2011/Symantec Norton 360/Norton 360.txt
  • norton/28-4-2011/Symantec Norton Anti Virus Symantec Norton Internet Security Symantec Norton 360/Norton Anti Virus 2011.txt
  • norton/28-4-2011/Symantec Norton Anti Virus Symantec Norton Internet Security Symantec Norton 360/Norton Internet Security 2011.txt
  • norton/28-4-2011/سفن إفري ويك.mht
    .eml .js polyglot
    • http://7everyweek.com/user/

    • http://7everyweek.com/user/?mid=15

    • http://7everyweek.com/user/?mid=26

    • http://7everyweek.com/user/?mid=41

    • http://forums.7everyweek.com/

    • http://forums.7everyweek.com/#

    • http://forums.7everyweek.com/#%C7%E1%C3%DE%D3%DC%DC%C7%E3-%C7%E1%CA%DA%E1%ED%E3%ED%C9

    • http://forums.7everyweek.com/#%C7%E1%DF%E3%C8%ED%E6%CA%D1-%E6%C7%E1%C5%E4%CA%D1%E4%CA

    • http://forums.7everyweek.com/#%C7%E1%E3%E4%CA%CF%EC-%C7%E1%C5%CF%C7%D1%ED

    • Show all
  • attachment-10
    .gif
  • attachment-100
    .js
  • attachment-101
    .js
  • attachment-102
    .js
  • attachment-103
    .js
  • attachment-11
    .gif
  • attachment-12
    .gif
  • attachment-13
    .gif
  • attachment-15
    .gif
  • attachment-16
    .jpg
  • attachment-18
    .gif
  • attachment-2
    .gif
  • attachment-28
    .gif
  • attachment-3
    .gif
  • attachment-4
    .gif
  • attachment-5
    .gif
  • attachment-56
    .gif
  • attachment-6
    .gif
  • attachment-60
    .gif
  • attachment-66
    .gif
  • attachment-68
    .gif
  • attachment-7
    .gif
  • attachment-70
    .gif
  • attachment-71
    .gif
  • attachment-72
    .gif
  • attachment-73
    .gif
  • attachment-74
    .gif
  • attachment-75
    .gif
  • attachment-76
    .gif
  • attachment-77
    .gif
  • attachment-78
    .gif
  • attachment-79
    .gif
  • attachment-8
    .gif
  • attachment-80
    .gif
  • attachment-81
    .gif
  • attachment-82
    .gif
  • attachment-83
    .gif
  • attachment-84
    .gif
  • attachment-85
    .gif
  • attachment-86
    .gif
  • attachment-87
    .gif
  • attachment-88
    .gif
  • attachment-89
    .gif
  • attachment-9
    .gif
  • attachment-91
    .gif
  • attachment-92
    .gif
  • attachment-93
    .gif
  • attachment-94
  • attachment-95
    .js
  • attachment-96
    .js
  • attachment-97
    .js
  • attachment-98
    .js
  • attachment-99
    .js
  • email-html-1.txt
    .html .js polyglot
  • norton/28-4-2011/هام جدا.txt
  • norton/Norton 2011 TrialReset v3.1.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • norton/سرح تركيب كراك النورتن.jpg
    .jpg