Overview

overview

3

Static

static

3

76b69fdeda...18.zip

windows7-x64

1

76b69fdeda...18.zip

windows10-2004-x64

1

set t=%temp%/x.exe

windows7-x64

1

set t=%temp%/x.exe

windows10-2004-x64

1

set t=%temp%/x.exe

windows7-x64

1

set t=%temp%/x.exe

windows10-2004-x64

1

CubeManUnc...ed.exe

windows7-x64

3

CubeManUnc...ed.exe

windows10-2004-x64

CubeManUnc...en.exe

windows7-x64

3

CubeManUnc...en.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    76b69fdeda1dcc587c17f53100f5a913_JaffaCakes118

  • Size

    18KB

  • MD5

    76b69fdeda1dcc587c17f53100f5a913

  • SHA1

    25f7ade760e9595b904b84652ded6a1adb4badfb

  • SHA256

    c88704f1f26a35bb55d8cec08d82a55dc8206ccbcb62e1f7ab0da23beb639626

  • SHA512

    b299e2362f364c34704067e5f51d13e4f175e50e7597bf75ca9e14ed5bf2578efb77906c5e9bc31ccd6b12849ae5036a144ccbc06b80cb575edbae94a510e637

  • SSDEEP

    384:/PryyJ2t/lUTV1uSsGgvPzly0ddz7OBDyW4TJqq30kvR:7yy2/lWUS3kzln6BDyWSEq30kvR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 76b69fdeda1dcc587c17f53100f5a913_JaffaCakes118
    .zip .vbs polyglot
  • CubeMan.bat
    .cab .vbs polyglot
  • set t=%temp%/x.exe del %t% extrac32 %0 %t% %t% del %t% exit
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • CubeMan.nfo
  • CubeMan.txt
  • CubeManNoFullScreen.bat
    .cab .vbs polyglot
  • set t=%temp%/x.exe del %t% extrac32 %0 %t% %t% del %t% exit
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • CubeManUncompressed.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • CubeManUncompressedNoFullScreen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections