General

  • Target

    6211b2ece65746560d9b9123acfe8fe7_JaffaCakes118

  • Size

    3.7MB

  • MD5

    6211b2ece65746560d9b9123acfe8fe7

  • SHA1

    ee29b6d93e0afc60458c0f0542fd1a8ab36c1e9e

  • SHA256

    f585210da745a18123b21e4840958b735086b230c37e3ba912aff048826ff114

  • SHA512

    148b87a5d4edd71fd835f002b1ed9ad763d97be13048ebda35b3abd0655ade3ba9f1916e4ee1a422cf07c488197897842a51653f483cda76bd3bc2af84b986d8

  • SSDEEP

    98304:2qKO1xSwIoUdoDICGD+to8NL9TsOuMkROeSQfwBOk1x+rgpLjQ:xNx3lUiICCuLuvNGEMxxG

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6211b2ece65746560d9b9123acfe8fe7_JaffaCakes118
    .rar
  • norton/28-4-2011/Symantec Norton 360/Norton 360.txt
  • norton/28-4-2011/Symantec Norton Anti Virus Symantec Norton Internet Security Symantec Norton 360/Norton Anti Virus 2011.txt
  • norton/28-4-2011/Symantec Norton Anti Virus Symantec Norton Internet Security Symantec Norton 360/Norton Internet Security 2011.txt
  • norton/28-4-2011/سفن إفري ويك.mht
    .eml .js polyglot
    • http://7everyweek.com/user/

    • http://7everyweek.com/user/?mid=15

    • http://7everyweek.com/user/?mid=26

    • http://7everyweek.com/user/?mid=41

    • http://forums.7everyweek.com/

    • http://forums.7everyweek.com/#

    • http://forums.7everyweek.com/#%C7%E1%C3%DE%D3%DC%DC%C7%E3-%C7%E1%CA%DA%E1%ED%E3%ED%C9

    • http://forums.7everyweek.com/#%C7%E1%DF%E3%C8%ED%E6%CA%D1-%E6%C7%E1%C5%E4%CA%D1%E4%CA

    • http://forums.7everyweek.com/#%C7%E1%E3%E4%CA%CF%EC-%C7%E1%C5%CF%C7%D1%ED

    • Show all
  • attachment-10
    .gif
  • attachment-100
    .js
  • attachment-101
    .js
  • attachment-102
    .js
  • attachment-103
    .js
  • attachment-11
    .gif
  • attachment-12
    .gif
  • attachment-13
    .gif
  • attachment-15
    .gif
  • attachment-16
    .jpg
  • attachment-18
    .gif
  • attachment-2
    .gif
  • attachment-28
    .gif
  • attachment-3
    .gif
  • attachment-4
    .gif
  • attachment-5
    .gif
  • attachment-56
    .gif
  • attachment-6
    .gif
  • attachment-60
    .gif
  • attachment-66
    .gif
  • attachment-68
    .gif
  • attachment-7
    .gif
  • attachment-70
    .gif
  • attachment-71
    .gif
  • attachment-72
    .gif
  • attachment-73
    .gif
  • attachment-74
    .gif
  • attachment-75
    .gif
  • attachment-76
    .gif
  • attachment-77
    .gif
  • attachment-78
    .gif
  • attachment-79
    .gif
  • attachment-8
    .gif
  • attachment-80
    .gif
  • attachment-81
    .gif
  • attachment-82
    .gif
  • attachment-83
    .gif
  • attachment-84
    .gif
  • attachment-85
    .gif
  • attachment-86
    .gif
  • attachment-87
    .gif
  • attachment-88
    .gif
  • attachment-89
    .gif
  • attachment-9
    .gif
  • attachment-91
    .gif
  • attachment-92
    .gif
  • attachment-93
    .gif
  • attachment-94
  • attachment-95
    .js
  • attachment-96
    .js
  • attachment-97
    .js
  • attachment-98
    .js
  • attachment-99
    .js
  • email-html-1.txt
    .html .js polyglot
  • norton/28-4-2011/هام جدا.txt
  • norton/Norton 2011 TrialReset v3.1.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • norton/سرح تركيب كراك النورتن.jpg
    .jpg
  • norton/سفن إفري ويك.mht
    .eml .js polyglot
    • http://7everyweek.com/user/

    • http://7everyweek.com/user/?mid=15

    • http://7everyweek.com/user/?mid=26

    • http://7everyweek.com/user/?mid=41

    • http://forums.7everyweek.com/

    • http://forums.7everyweek.com/#

    • http://forums.7everyweek.com/#%C7%E1%C3%DE%D3%DC%DC%C7%E3-%C7%E1%CA%DA%E1%ED%E3%ED%C9

    • http://forums.7everyweek.com/#%C7%E1%DF%E3%C8%ED%E6%CA%D1-%E6%C7%E1%C5%E4%CA%D1%E4%CA

    • http://forums.7everyweek.com/#%C7%E1%E3%E4%CA%CF%EC-%C7%E1%C5%CF%C7%D1%ED

    • Show all
  • attachment-10
    .gif
  • attachment-100
    .js
  • attachment-101
    .js
  • attachment-102
    .js
  • attachment-103
    .js
  • attachment-11
    .gif
  • attachment-12
    .gif
  • attachment-13
    .gif
  • attachment-15
    .gif
  • attachment-16
    .jpg
  • attachment-18
    .gif
  • attachment-2
    .gif
  • attachment-28
    .gif
  • attachment-3
    .gif
  • attachment-4
    .gif
  • attachment-5
    .gif
  • attachment-56
    .gif
  • attachment-6
    .gif
  • attachment-60
    .gif
  • attachment-66
    .gif
  • attachment-68
    .gif
  • attachment-7
    .gif
  • attachment-70
    .gif
  • attachment-71
    .gif
  • attachment-72
    .gif
  • attachment-73
    .gif
  • attachment-74
    .gif
  • attachment-75
    .gif
  • attachment-76
    .gif
  • attachment-77
    .gif
  • attachment-78
    .gif
  • attachment-79
    .gif
  • attachment-8
    .gif
  • attachment-80
    .gif
  • attachment-81
    .gif
  • attachment-82
    .gif
  • attachment-83
    .gif
  • attachment-84
    .gif
  • attachment-85
    .gif
  • attachment-86
    .gif
  • attachment-87
    .gif
  • attachment-88
    .gif
  • attachment-89
    .gif
  • attachment-9
    .gif
  • attachment-91
    .gif
  • attachment-92
    .gif
  • attachment-93
    .gif
  • attachment-94
  • attachment-95
    .js
  • attachment-96
    .js
  • attachment-97
    .js
  • attachment-98
    .js
  • attachment-99
    .js
  • email-html-1.txt
    .html .js polyglot
  • norton/هام جدا.txt