Overview

overview

3

Static

static

3

aa738f0059...18.exe

windows7-x64

3

aa738f0059...18.exe

windows10-2004-x64

3

$TEMP/Wind...ng.cmd

windows7-x64

1

$TEMP/Wind...ng.cmd

windows10-2004-x64

1

$TEMP/Wind...ct.exe

windows7-x64

1

$TEMP/Wind...ct.exe

windows10-2004-x64

1

$TEMP/Wind...ct.exe

windows7-x64

3

$TEMP/Wind...ct.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa738f00595f5fec5a31c41b0b218d2b_JaffaCakes118

  • Size

    182KB

  • MD5

    aa738f00595f5fec5a31c41b0b218d2b

  • SHA1

    81ac4116a13f65e62d8019b4270fb259cfa2a25d

  • SHA256

    63fc557cb3f60e8758b71ca5e3111be3c9710bac21182740811a82a959d597bc

  • SHA512

    ae4a2e6689499b5be32c03676baafa362717a630be1d45b71ce00de630687550c5106d412c1e0815c0c2be170e63261ce82320e3dd171b01d1f616b60de5595b

  • SSDEEP

    3072:Q5Xvuh0GCMQoa6Dj7rAl5d7NmCvIP6Hba8c3lql+Jv+UMfnSEd9dU9hc:Yuh3RJUl5pIP67dlwv5MaO9Se

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • aa738f00595f5fec5a31c41b0b218d2b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/Window~1/Windows Aktivierung.cmd
  • $TEMP/Window~1/bin/acer2.1.xrm-ms
    .xml
  • $TEMP/Window~1/bin/bootsect.exe
    .exe windows:6 windows x64 arch:x64

    5a1e57c155076842400521449e5bd0d0


    Headers

    Imports

    Sections

  • $TEMP/Window~1/bin/slic
  • $TEMP/Window~1/bin/x86/bootsect.exe
    .exe windows:6 windows x86 arch:x86

    11ee6a8ad6acd010c04212b386d12fef


    Headers

    Imports

    Sections