Overview

overview

3

Static

static

3

demo.exe

windows7-x64

3

demo.exe

windows10-2004-x64

3

killatom/killatom.exe

windows7-x64

1

killatom/killatom.exe

windows10-2004-x64

3

make.bat

windows7-x64

1

make.bat

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc8364dad1d63454d47d3c0875600de3_JaffaCakes118

  • Size

    20KB

  • MD5

    bc8364dad1d63454d47d3c0875600de3

  • SHA1

    2c0c591008c494b71dd163377b210a85fc0cbe4e

  • SHA256

    390745f1abdbc203f9c7cf675e8f54ceb76064d058e564e8998747d07a0b34c2

  • SHA512

    45d80ed6be2a0ae20c3870c32f6c544c8a5b1a9d2a6919dad4b34f3a3b9621297b5db1cd1bd9aa0e678a9212618d9bb9f5519734d4472ae695ba70f91ad7e3d0

  • SSDEEP

    384:R0sSqPCV/2GG2cDpVWidgHByIg2m23aAHBAsp4iSgLWkJ4T0rv3O1hyCiuV9m:es7qV/2GG2MWxHByf2H3Erg/4TSG10T

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bc8364dad1d63454d47d3c0875600de3_JaffaCakes118
    .zip
  • FILE_ID.DIZ
  • FIO.INC
  • IMPORT.ASH
  • MACROS.ASH
  • MEMORY.INC
  • PE.ASH
  • WIN32API.ASH
  • dee/DEE.ASH
  • dee/dee.inc
  • demo.2
    .exe windows:1 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • demo.asm
  • import.inc
  • ipc.inc
  • killatom/killatom.c
  • killatom/killatom.exe
    .exe windows:1 windows x86 arch:x86

    9234eb547bd8a975d0475b2e1a3c96ba


    Headers

    Imports

    Exports

    Sections

  • ldizx/LDIZX.ASH
  • ldizx/ldizx.inc
  • make.bat
  • rnd.inc
  • search.inc
  • system.inc