General

  • Target

    c29bc4713727d469886ea655115dd177_JaffaCakes118

  • Size

    1.1MB

  • MD5

    c29bc4713727d469886ea655115dd177

  • SHA1

    a618e53de53878f42d878df9838d24ec0a089145

  • SHA256

    b90f778b1da0d357263db0f9149dc1db6ca66cb555feabcd5106a97a549eaa29

  • SHA512

    6db8e7187c85c36d049b7209f240aa0aa971939ff24a15d925c3c5bbfa77a08cad7744c3a82d80eddbd68a751a4b1ad8ed3340fe7bafe52309e0f1df1400e9e7

  • SSDEEP

    24576:3MeA2ja15FInKvF6sR7u8hlk6fR3LCNmW8TAZUcBLaWN:ceQEsR7jh26fILXFr

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 9 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • EICAR Anti-Malware test file 1 IoCs

Files

  • c29bc4713727d469886ea655115dd177_JaffaCakes118
    .zip
  • bz #2.rar
    .rar
  • BZ #2.bat
  • binaries/others/DvL/Dangerous Menu 3.2/DM 3.2.bat
    .bat .vbs
  • binaries/others/DvL/Dangerous Menu 3.2/about.gif
  • binaries/others/DvL/Dangerous Menu 3.2/examples/ioana_1.txt
  • binaries/others/DvL/Dangerous Menu 3.2/examples/ioana_2.txt
    .vbs
  • binaries/others/DvL/Dangerous Menu 3.2/history.txt
  • binaries/others/DvL/Junk Remover 5.2/JR52.exe
  • binaries/others/DvL/Junk Remover 5.2/JR52.ico
  • binaries/others/DvL/Junk Remover 5.2/__notes__.txt
  • binaries/others/DvL/Junk Remover 5.2/readme.txt
  • binaries/others/DvL/Junk Remover 5.2/source/JR52.bas
  • binaries/others/DvL/Junk Remover 5.2/source/JR52.exe
  • binaries/others/DvL/Junk Remover 5.2/source/JR52.obj
  • binaries/others/SAD1c/BoM 7.5/BoM.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • binaries/others/SAD1c/BoM 7.5/History.nfo
  • binaries/others/SAD1c/BoM 7.5/Readme.txt
  • binaries/others/SAD1c/BoM 7.5/about.GIF
  • binaries/others/SAD1c/BoM 7.5/examples/BAT.Batch-O-Matic.75_1.bat
    .bat .vbs
  • binaries/others/SAD1c/BoM 7.5/examples/BAT.Batch-O-Matic.75_2.cmd
    .cmd .vbs
  • binaries/others/SpTh/RSBG/Random Silly Batch Generator.exe
    .exe windows:4 windows x86 arch:x86

    d17047999d0735a0c49bef9619933307


    Headers

    Imports

    Sections

  • binaries/others/SpTh/RSBG/about.GIF
  • binaries/others/SpTh/RSBG/about.txt
  • binaries/others/SpTh/RSBG/examples/RSBG_1.txt
  • binaries/others/SpTh/RSBG/examples/RSBG_2.txt
    .vbs
  • binaries/virii/Adious/Bat.Bush/Bat.Bush.bat
    .bat .vbs
  • binaries/virii/Adious/Bat.Bush/bat.bush.txt
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap0.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap1.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap2.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap3.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap4.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap5.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap6.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap7.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/dropped files/leap8.vbs
    .vbs
  • binaries/virii/DvL/Bat.Quantum Leap/normal/Bat.Quantum Leap.bat
  • binaries/virii/DvL/Bat.Quantum Leap/with trash code/Bat.Quantum Leap.bat
  • binaries/virii/DvL/Bat.Trash.a/Bat.Trash.a [UPX].exe
  • binaries/virii/DvL/Bat.Trash.a/Bat.Trash.a.bas
  • binaries/virii/DvL/Bat.Trash.a/Bat.Trash.a.exe
  • binaries/virii/DvL/Bat.Trash.a/Bat.Trash.a.obj
  • binaries/virii/DvL/Bat.Trash.b/Bat.Trash.b.bat
  • binaries/virii/DvL/Bat.Trash.c/Bat.Trash.c [fixed].bat
  • binaries/virii/DvL/Bat.WinUpdate/__notes__.txt
  • binaries/virii/DvL/Bat.WinUpdate/bat.win update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • binaries/virii/DvL/Bat.pIRChminator/bat.pIRChminator.bat
  • binaries/virii/DvL/Bat.pIRChminator/bat.pIRChminator.txt
  • binaries/virii/L0NEw0lf/Bat.BatzBack.A/Bat.BatzBack.A.bat
  • binaries/virii/L0NEw0lf/Bat.BatzBack.A/Readme.txt
  • binaries/virii/L0NEw0lf/Bat.BatzBack.A/__notes__.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackA/BatzBackA.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackA/about.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackA/source/BatzBackA.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackB/BatzBackB.Scr
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackB/about.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackB/source/BatzBackB.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackC/BatzBackC.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe .vbs windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections

  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackC/about.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackC/source/BatzBackC.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackD/BatzBackD.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe .vbs windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections

  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackD/about.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackD/source/BatzBackD.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackE/BatzBackE.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackE/about.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/BatzBackE/source/BackZatE.txt
  • binaries/virii/L0NEw0lf/BatzBack Family/older/BatzBack_1.scr
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • binaries/virii/L0NEw0lf/BatzBack Family/older/BatzBack_2.scr
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • binaries/virii/L0NEw0lf/BatzBack Family/older/Readme.txt
  • binaries/virii/L0NEw0lf/dropped files/BBbLWDB.bat
    .bat .vbs
  • binaries/virii/L0NEw0lf/dropped files/BBbLWDB2.bat
    .bat .vbs
  • binaries/virii/L0NEw0lf/dropped files/BatzBack.bat
  • binaries/virii/L0NEw0lf/dropped files/WuFFie.bat
    .bat .vbs
  • binaries/virii/L0NEw0lf/dropped files/__notes__.txt
  • binaries/virii/L0NEw0lf/dropped files/script.ini
  • binaries/virii/Philet0a$t3r & SpTh/Bat.Iaafe/Bat.Iaafe.bat
    .bat .vbs
  • binaries/virii/Toro/Bat.Tee/Tee_binary.bat
    .bat .vbs
  • binaries/virii/Toro/Bat.Tee/Tee_firstgen.bat
    .bat .vbs
  • binaries/virii/Toro/Bat.Tee/Tee_secondgen.bat
    .bat .vbs
  • binaries/virii/Toro/Bat.Tee/Tee_source.txt
    .vbs
  • binaries/virii/Toro/Bat.Tee/__notes__.txt
  • binaries/virii/Toro/Bat.Tee/readme.txt
  • binaries/virii/Toro/Bat.Tee/rrlf.htm
    .html
  • bz.00
  • bz.01
  • bz.02
  • bz.03
  • bz.04
    .vbs
  • bz.05
    .vbs
  • bz.06
  • bz.07
    .vbs
  • bz.08
  • bz.09
  • bz.logo
  • file_id.diz
  • msg.vbs
    .vbs
  • parentaladvisory.jpg
    .jpg