Overview

overview

5

Static

static

3

FILES/LJ_INFO.exe

windows7-x64

FILES/LJ_INFO.exe

windows10-2004-x64

FILES/MISC...RN.exe

windows7-x64

5

FILES/MISC...RN.exe

windows10-2004-x64

5

FILES/MISC/KILL.exe

windows7-x64

1

FILES/MISC/KILL.exe

windows10-2004-x64

1

FILES/MISC/SPAWN.exe

windows7-x64

1

FILES/MISC/SPAWN.exe

windows10-2004-x64

1

FILES/SAMPLES/EX1.exe

windows7-x64

1

FILES/SAMPLES/EX1.exe

windows10-2004-x64

1

FILES/SAMPLES/EX2.exe

windows7-x64

1

FILES/SAMPLES/EX2.exe

windows10-2004-x64

1

FILES/SAMPLES/EX3.exe

windows7-x64

1

FILES/SAMPLES/EX3.exe

windows10-2004-x64

1

FILES/SAMPLES/EX4.exe

windows7-x64

1

FILES/SAMPLES/EX4.exe

windows10-2004-x64

1

FILES/UTIL...PE.exe

windows7-x64

FILES/UTIL...PE.exe

windows10-2004-x64

FILES/UTIL...-PE.js

windows7-x64

3

FILES/UTIL...-PE.js

windows10-2004-x64

3

FILES/UTIL...LE.exe

windows7-x64

1

FILES/UTIL...LE.exe

windows10-2004-x64

1

FILES/UTIL...NK.exe

windows7-x64

1

FILES/UTIL...NK.exe

windows10-2004-x64

1

FILES/UTIL...LL.exe

windows7-x64

1

FILES/UTIL...LL.exe

windows10-2004-x64

1

FILES/UTIL...TE.exe

windows7-x64

1

FILES/UTIL...TE.exe

windows10-2004-x64

1

VXTASY#1.exe

windows7-x64

VXTASY#1.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e898a9d95f82dbbcd0dbe06338bd742_JaffaCakes118

  • Size

    518KB

  • MD5

    3e898a9d95f82dbbcd0dbe06338bd742

  • SHA1

    19fc242a627481d16c03b4487f37786eaf8df01c

  • SHA256

    017c74f0e2671302f5fef903ba89fa77666d86ec73ad8c838d88136e394fd0e1

  • SHA512

    96676add4b53425e93b269cdde216af225e05baaad0e49b584d5e3ca38deb6991448bff68bcb0855e259edf698e2417459f197daa6a23a231708501eb6ce6714

  • SSDEEP

    12288:qzOCvWApPOy0FP3+RZ6zSrKcfK9LeTS1W7:iOWO33+RZ6KPiRewu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e898a9d95f82dbbcd0dbe06338bd742_JaffaCakes118
    .zip
  • --------.---
  • FILES/INCLUDES/DESCRIPT.ION
  • FILES/INCLUDES/W32ER_LJ.INC
  • FILES/INCLUDES/W32NT_LJ.INC
  • FILES/INCLUDES/W32US_LJ.INC
  • FILES/LJ_INFO.EXE
  • FILES/MISC/COPYKERN.ASM
  • FILES/MISC/COPYKERN.EXE
    .exe windows:1 windows x86 arch:x86

    535e5c6dcb45fe9fc166e4fe5bd3b19b


    Headers

    Imports

    Sections

  • FILES/MISC/DESCRIPT.ION
  • FILES/MISC/KILL.ASM
  • FILES/MISC/KILL.EXE
    .exe windows:1 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • FILES/MISC/SPAWN.ASM
  • FILES/MISC/SPAWN.EXE
    .exe windows:1 windows x86 arch:x86

    541160bce55bf5030f1053d9ca2f310b


    Headers

    Imports

    Sections

  • FILES/SAMPLES/DESCRIPT.ION
  • FILES/SAMPLES/EX1.ASM
  • FILES/SAMPLES/EX1.EXE
    .exe windows:1 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections

  • FILES/SAMPLES/EX2.ASM
  • FILES/SAMPLES/EX2.EXE
    .exe windows:1 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • FILES/SAMPLES/EX3.ASM
  • FILES/SAMPLES/EX3.EXE
    .exe windows:1 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • FILES/SAMPLES/EX4.ASM
  • FILES/SAMPLES/EX4.EXE
    .exe windows:1 windows x86 arch:x86

    37b999431cf86f5dead6479046208a23


    Headers

    Imports

    Sections

  • FILES/SAMPLES/EX4.RC
  • FILES/UTILS/DESCRIPT.ION
  • FILES/UTILS/INFO-PE/INFO-PE.EXE
  • FILES/UTILS/INFO-PE/INFO-PE.PAS
    .js
  • FILES/UTILS/INFO-PE/README.TXT
  • FILES/UTILS/PEMANGLE/MAKEFILE
  • FILES/UTILS/PEMANGLE/PEMANGLE.ASM
  • FILES/UTILS/PEMANGLE/PEMANGLE.DEF
  • FILES/UTILS/PEMANGLE/PEMANGLE.EXE
    .exe windows:1 windows x86 arch:x86

    d4f0d3036e1b95ffaa0e8843b6958e2a


    Headers

    Imports

    Sections

  • FILES/UTILS/PEMANGLE/README.TXT
  • FILES/UTILS/PEMANGLE/TEST.ASM
  • FILES/UTILS/PESHRINK/MAKEFILE
  • FILES/UTILS/PESHRINK/PESHRINK.ASM
  • FILES/UTILS/PESHRINK/PESHRINK.DEF
  • FILES/UTILS/PESHRINK/PESHRINK.EXE
    .exe windows:1 windows x86 arch:x86

    d4f0d3036e1b95ffaa0e8843b6958e2a


    Headers

    Imports

    Sections

  • FILES/UTILS/PESHRINK/README.TXT
  • FILES/UTILS/PESHRINK/TEST.ASM
  • FILES/UTILS/PESPILL/MAKEFILE
  • FILES/UTILS/PESPILL/PESPILL.ASM
  • FILES/UTILS/PESPILL/PESPILL.DEF
  • FILES/UTILS/PESPILL/PESPILL.EXE
    .exe windows:1 windows x86 arch:x86

    b95e26812eedecc8bfaf02c6c97dd12c


    Headers

    Imports

    Sections

  • FILES/UTILS/PESPILL/README.TXT
  • FILES/UTILS/PESPILL/TEST.ASM
  • FILES/UTILS/PEWRITE/MAKEFILE
  • FILES/UTILS/PEWRITE/PEWRITE.ASM
  • FILES/UTILS/PEWRITE/PEWRITE.DEF
  • FILES/UTILS/PEWRITE/PEWRITE.EXE
    .exe windows:1 windows x86 arch:x86

    a6a3480217c0dc34fbfb16ba31b79922


    Headers

    Imports

    Sections

  • FILES/UTILS/PEWRITE/README.TXT
  • FILES/UTILS/PEWRITE/TEST.ASM
  • FILE_ID.DIZ
  • INDEX.MAG
  • VXTASY#1.000
  • VXTASY#1.100
  • VXTASY#1.101
  • VXTASY#1.102
  • VXTASY#1.103
  • VXTASY#1.104
  • VXTASY#1.105
  • VXTASY#1.106
  • VXTASY#1.200
  • VXTASY#1.201
  • VXTASY#1.202
  • VXTASY#1.203
  • VXTASY#1.204
  • VXTASY#1.205
  • VXTASY#1.206
  • VXTASY#1.207
  • VXTASY#1.208
  • VXTASY#1.209
  • VXTASY#1.20A
  • VXTASY#1.20B
  • VXTASY#1.20C
  • VXTASY#1.20D
  • VXTASY#1.300
  • VXTASY#1.301
  • VXTASY#1.400
  • VXTASY#1.401
  • VXTASY#1.402
  • VXTASY#1.403
  • VXTASY#1.404
  • VXTASY#1.405
  • VXTASY#1.406
  • VXTASY#1.407
  • VXTASY#1.408
  • VXTASY#1.409
  • VXTASY#1.40A
  • VXTASY#1.40B
  • VXTASY#1.40C
  • VXTASY#1.500
  • VXTASY#1.501
  • VXTASY#1.502
  • VXTASY#1.503
  • VXTASY#1.504
  • VXTASY#1.505
  • VXTASY#1.506
  • VXTASY#1.999
  • VXTASY#1.EXE
  • VXTASY.DAT
  • VXTASY.NFO