Overview

overview

8

Static

static

7

giod61om3/aspimgr.exe

windows7-x64

3

giod61om3/aspimgr.exe

windows10-2004-x64

3

giod61om3/braviax.exe

windows7-x64

1

giod61om3/braviax.exe

windows10-2004-x64

3

giod61om3/cru629.dll

windows7-x64

3

giod61om3/cru629.dll

windows10-2004-x64

8

giod61om3/index[.js

windows7-x64

3

giod61om3/index[.js

windows10-2004-x64

3

giod61om3/...1].exe

windows7-x64

7

giod61om3/...1].exe

windows10-2004-x64

7

giod61om3/ntos.exe

windows7-x64

3

giod61om3/ntos.exe

windows10-2004-x64

3

giod61om3/...tr.exe

windows7-x64

3

giod61om3/...tr.exe

windows10-2004-x64

3

giod61om3/~ie3.exe

windows7-x64

1

giod61om3/~ie3.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b404374fb3cec8259c542ce3b242a108_JaffaCakes118

  • Size

    710KB

  • MD5

    b404374fb3cec8259c542ce3b242a108

  • SHA1

    46ea6492d401a9c32d164d7a03b02d76f6c6391e

  • SHA256

    1d178533296375d2ea9f8b7d5526866883e60d96173e0229dc38ce8b2ca9e726

  • SHA512

    403c207ec2c6f30d17d1bcfe61ebc70e9e81c4a00ccb3d072ed526a0b55138ab34d6ca379b6097de2cc05909130003399173801b6efa78b2dbea6093033ebeb9

  • SSDEEP

    12288:aSVCbaquW5SRApbl4fJwkZPfzwxHiu4Ruj69WnhK/IYqvBanoIFNe:aSVrqjCApbOpz+HVGfzWBa2

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • b404374fb3cec8259c542ce3b242a108_JaffaCakes118
    .zip

    Password: infected

  • giod61om3/aspimgr.exe
    .exe windows:4 windows x86 arch:x86

    ded3edb311f58c4c6a57f343ec1004ec


    Headers

    Imports

    Sections

  • giod61om3/braviax.exe
    .exe windows:4 windows x86 arch:x86

    ab2acf9a1676eb22e3230be8d6c3bb80


    Headers

    Imports

    Sections

  • giod61om3/cru629.dat
    .dll windows:1 windows x86 arch:x86

    87bed5a7cba00c7e1f4015f1bdae2183


    Headers

    Imports

    Sections

  • giod61om3/index[
    .js
  • giod61om3/index[1]
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • giod61om3/index[1].htm
    .html .js polyglot
  • giod61om3/ntos.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • giod61om3/winivstr.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • giod61om3/~ie3.exe
    .exe windows:4 windows x86 arch:x86

    4cb89564147137d5b233e46cce0f1666


    Headers

    Imports

    Sections