General

  • Target

    a5b976cd424af6d0ac8c91100e0dff68_JaffaCakes118

  • Size

    1.3MB

  • MD5

    a5b976cd424af6d0ac8c91100e0dff68

  • SHA1

    a62b98ba0bb2c52a1623156eb16b6312c86d4352

  • SHA256

    8b903dee40bd2987d68cfe44cc9b1ab2455b6eb4c2b375efecd0cff963e16e0c

  • SHA512

    040fc802278ee0b546f42076e4ba2e47e8857c1f617ff6cc002e74835ef0f6fff232f34c585644e33ba6be81d0c03415e1b0753a3b795c0d74663da77b847716

  • SSDEEP

    24576:aIK3uxd1eCT4D+Zm3GixFW1q0fXv2AYlAgQHQ30Q/WNLK3BYBmRDfUkOv91maBa:GCTtmWivW1q0fXvlXQkrNLbBmFUkGha

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • a5b976cd424af6d0ac8c91100e0dff68_JaffaCakes118
    .rar
  • GRScript-v1.5/Config.ini
    .js
  • GRScript-v1.5/GRScript.chm
    .chm
  • GRScript-v1.5/GRZiper.exe
    .exe windows:4 windows x86 arch:x86

    38161496aaa857d0c77b44dcebcc9ae0


    Headers

    Imports

    Sections

  • GRScript-v1.5/GrayRobot.exe
    .exe windows:4 windows x86 arch:x86

    c900199116b2c36e56d038dd27946141


    Headers

    Imports

    Sections

  • GRScript-v1.5/Template/Config.ini
  • GRScript-v1.5/Template/GRSPack.res
    .exe windows:4 windows x86 arch:x86

    8b36639d80fb873c726dfc550d18661b


    Headers

    Imports

    Sections

  • GRScript-v1.5/Template/MainExe.res
    .exe windows:4 windows x86 arch:x86

    344c05938ce94e8ffa6346c365e96d70


    Headers

    Imports

    Sections

  • GRScript-v1.5/Template/RootFileList.res
  • GRScript-v1.5/Template/TemplateFileList.res
  • GRScript-v1.5/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    4a845731436782339f3143dc6f9f40f3


    Headers

    Imports

    Exports

    Sections

  • GRScript-v1.5/libmySQL.dll
    .dll windows:4 windows x86 arch:x86

    91563a0920da723e99dde271abae3dc1


    Headers

    Imports

    Exports

    Sections

  • GRScript-v1.5/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    e8e5c14d5c3d5e4b14957c6eb294fa14


    Headers

    Imports

    Exports

    Sections

  • GRScript-v1.5/新云软件.url
    .url