General

  • Target

    a68cba68a0f74fdf960469e3d57f6493_JaffaCakes118

  • Size

    107KB

  • MD5

    a68cba68a0f74fdf960469e3d57f6493

  • SHA1

    14704bb88fc5f1a16fb47804a9f7945ea3b66a48

  • SHA256

    ae23c4d6d58ec23cbda5ab63563acf5c1ed930bf6aaa9596d38b5fd6afd0175f

  • SHA512

    ee49c8b0964d0c6d6cbf819162ec6cf813cbbd3628fec7a4a8baea3112a65bd4ba9faaed00c9d1ddd8ec2fc6da545359b5f9325eaa2e227f355d20ccce8f3c70

  • SSDEEP

    1536:s8k9FuVrRPYiADPCPTPMIb/PThjZRKQjCLDMTA5fIDamjf87FaO9MH/roximOR:FkncS0bMIP8QlU5ADF1OKkxIR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a68cba68a0f74fdf960469e3d57f6493_JaffaCakes118
    .rar
  • Form1.frm
    .vbs
  • Form1.frx
  • Globals.frm
  • botz.PDM
  • botz.exe
    .exe windows:4 windows x86 arch:x86

    96e55b5fce1d6af95abd24f25b72f977


    Headers

    Imports

    Sections

  • botz.vbp
  • botz.vbw
  • data/instructions.txt
  • data/下载说明.htm
    .html .js polyglot
  • declares.bas
    .vbs
  • frmAbout.frm
    .vbs
  • frmAbout.frx
  • images/addwheel.bmp
  • images/addwheeldis.bmp
  • images/botz.ico
  • images/boxes.bmp
  • images/construct.bmp
  • images/construct2.bmp
  • images/construct3.bmp
  • images/delete.bmp
  • images/deletedis.bmp
  • images/globals1.bmp
  • images/logoongray.bmp
  • images/logoongray2.bmp
  • images/new.bmp
  • images/open.bmp
  • images/pspbrwse.jbf
  • images/save.bmp
  • images/simulate.bmp
  • images/simulate3.bmp
  • images/terrain.bmp
  • images/terraindis.bmp
  • images/terrainon.bmp
  • images/下载说明.htm
    .html .js polyglot
  • presets/AntiGrav.botz
  • presets/Dancer.botz
  • presets/MuscleDemo.botz
  • presets/jumper.botz
  • presets/spike-ball.botz
  • presets/unicycle.botz
  • presets/walker.botz
  • presets/下载说明.htm
    .html .js polyglot
  • resume.botz
  • 下载说明.htm
    .html .js polyglot