Overview

overview

3

Static

static

3

demo/index.html

windows7-x64

3

demo/index.html

windows10-2004-x64

3

injector.pl

ubuntu-18.04-amd64

injector.pl

debian-9-armhf

injector.pl

debian-9-mips

injector.pl

debian-9-mipsel

magicsql/S...n.html

windows7-x64

3

magicsql/S...n.html

windows10-2004-x64

3

modules/ru.scr

windows7-x64

modules/ru.scr

windows10-2004-x64

modules/ud...nclude

ubuntu-18.04-amd64

modules/ud...nclude

debian-9-armhf

modules/ud...nclude

debian-9-mips

modules/ud...nclude

debian-9-mipsel

modules/up...nclude

ubuntu-18.04-amd64

modules/up...nclude

debian-9-armhf

modules/up...nclude

debian-9-mips

modules/up...nclude

debian-9-mipsel

tmp/fscan.scr

windows7-x64

tmp/fscan.scr

windows10-2004-x64

utils/scrmake.exe

windows7-x64

1

utils/scrmake.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b73afa1ffed8143b99d3ed5856209ca6_JaffaCakes118

  • Size

    1.4MB

  • MD5

    b73afa1ffed8143b99d3ed5856209ca6

  • SHA1

    49d45050e1f2565017b1536a6eb5a85b0dd1648c

  • SHA256

    1c3b5d260e9809efb194de5d5c77428a95d6efa5ad39ea91e1d03355253b42a2

  • SHA512

    840d032bea25bdd09a1f34d08034725dc8a7f75db0c1545634f13004deba8ea4c9e34a1b656653de819f88ed9ecc46972197a93b9dd48451518e851fd4d4d7b8

  • SSDEEP

    24576:5jMFSW6C/xPXQMGCaj0+sL3yuIRNPvzpK43Ecfd6O2kmUv1QXoR9nHsOu7ONAfIv:+FSqPXhaj0+sL3JCN9pEckO1JQM9nMOl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b73afa1ffed8143b99d3ed5856209ca6_JaffaCakes118
    .zip
  • demo/index.html
    .html
  • demo/injector.swf
  • demo/injector_config.xml
  • demo/injector_controller.swf
  • injector.pl
    .pl .sh linux
  • magicsql/Sec_Login.html
    .html
  • magicsql/Sec_Login.swf
  • magicsql/Sec_Login_config.xml
  • magicsql/Sec_Login_controller.swf
  • modules/injectormod.include
  • modules/ishell.include
  • modules/ru.scr
  • modules/tabledumper.include
  • modules/tra_tabledumper.include
  • modules/udprevshell.include
    .sh linux
  • modules/uploadfile.include
    .sh linux
  • templates/get_template.include
  • templates/post_template.include
  • tmp/fscan.scr
  • utils/scrmake.exe
    .exe windows:4 windows x86 arch:x86

    6fadf0c8d6bdacd3b0ce33751bed435f


    Headers

    Imports

    Sections