Overview

overview

4

Static

static

3

Fake_del1.exe

windows7-x64

3

Fake_del1.exe

windows10-2004-x64

3

GECCO.exe

windows7-x64

3

GECCO.exe

windows10-2004-x64

3

KISS.exe

windows7-x64

3

KISS.exe

windows10-2004-x64

3

MADCOW.doc

windows7-x64

4

MADCOW.doc

windows10-2004-x64

1

clickme.exe

windows7-x64

3

clickme.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    93d5f9d7e76419ca2a7bdf83d1f59f03_JaffaCakes118

  • Size

    2.4MB

  • MD5

    93d5f9d7e76419ca2a7bdf83d1f59f03

  • SHA1

    f2064e4d6439511b05b54d1beefb155e6226d93f

  • SHA256

    83626c692e0682ac9c0b002b1e02044b46eef401bc902305efa19c9c9b6afc89

  • SHA512

    8ed74d6e5a4097563622e3fc58580454bd8163a1426e5a0af6f73320f92eb18757fbbeb7b84dee848d6402d5b2e1929eae7926a907b89884b0374c2d35648cd5

  • SSDEEP

    24576:SoDcbT6SWIsHzjVW0mFe1Lf4+/e0POaaRmsLZzEYiA7JJSqG+bpd1I9/k2ly0q0p:SoDcbT6SWIsHz5Uel4MeAc+yJSQNd1vq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 93d5f9d7e76419ca2a7bdf83d1f59f03_JaffaCakes118
    .eml

    • http://odnoklassniki.km.ru

  • Fake_del1.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • GECCO.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • KISS.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • MADCOW.DOC
    .doc windows office2003
  • clickme.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • email-plain-1.txt