Overview

overview

7

Static

static

1

Default/Ap...op.lnk

windows7-x64

3

Default/Ap...op.lnk

windows10-2004-x64

7

Default/Ap...un.lnk

windows7-x64

3

Default/Ap...un.lnk

windows10-2004-x64

7

Default/Ap...ch.lnk

windows7-x64

3

Default/Ap...ch.lnk

windows10-2004-x64

7

Default/Ap...er.lnk

windows7-x64

3

Default/Ap...er.lnk

windows10-2004-x64

7

Default/Ap...el.lnk

windows7-x64

3

Default/Ap...el.lnk

windows10-2004-x64

7

Default/Ap...er.lnk

windows7-x64

3

Default/Ap...er.lnk

windows10-2004-x64

7

Default/Ap...pt.lnk

windows7-x64

3

Default/Ap...pt.lnk

windows10-2004-x64

7

Default/Ap...ll.lnk

windows7-x64

3

Default/Ap...ll.lnk

windows10-2004-x64

7

Default/Ap...pt.lnk

windows7-x64

3

Default/Ap...pt.lnk

windows10-2004-x64

7

Default/Ap...ll.lnk

windows7-x64

3

Default/Ap...ll.lnk

windows10-2004-x64

7

Default/Ap...nt.lnk

windows7-x64

5

Default/Ap...nt.lnk

windows10-2004-x64

7

Default/Ap...nt.lnk

windows7-x64

5

Default/Ap...nt.lnk

windows10-2004-x64

7

Default/Ap...ns.lnk

windows7-x64

3

Default/Ap...ns.lnk

windows10-2004-x64

7

Default/Ap...er.lnk

windows7-x64

5

Default/Ap...er.lnk

windows10-2004-x64

7

Default/Ap...em.lnk

windows7-x64

3

Default/Ap...em.lnk

windows10-2004-x64

7

Default/Ap...er.lnk

windows7-x64

5

Default/Ap...er.lnk

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9340e2aa3c512e83463f08579bdd3b1_JaffaCakes118

  • Size

    73KB

  • MD5

    c9340e2aa3c512e83463f08579bdd3b1

  • SHA1

    584c5d013a93c43d5f76ec4440287c53c74d9e10

  • SHA256

    a5ccff55703c410417f0fa9723a05fae5c31f011d2cdd9adde9745eddedc5cb5

  • SHA512

    a340bbe0bacfe33d7ec3d6ac60f188c9680ca958fa45789f1805bd8fed73ac926c9c2c033009840eaad32fc96c38b75c8a1d7ea1f57d26d3255a5aa559079d0e

  • SSDEEP

    1536:Ce52IQgab2lmQ8z9MwwAmIcWJG4I/FSftI1c7UM7Xy7DOy:dQggQ8zSAmIFc4+quCUM7Xciy

Score
1/10

Malware Config

Signatures

Files

  • c9340e2aa3c512e83463f08579bdd3b1_JaffaCakes118
    .rar
  • Default/AppData/Local/Microsoft/Windows Sidebar/settings.ini
  • Default/AppData/Local/Microsoft/Windows/Shell/DefaultLayouts.xml
    .xml
  • Default/AppData/Local/Microsoft/Windows/WinX/Group1/1 - Desktop.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group1/desktop.ini
  • Default/AppData/Local/Microsoft/Windows/WinX/Group2/1 - Run.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group2/2 - Search.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group2/3 - Windows Explorer.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group2/4 - Control Panel.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group2/5 - Task Manager.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group2/desktop.ini
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/01 - Command Prompt.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/01a - Windows PowerShell.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/02 - Command Prompt.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/02a - Windows PowerShell.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/03 - Computer Management.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/04 - Disk Management.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/04-1 - Network Connections.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/05 - Device Manager.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/06 - System.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/07 - Event Viewer.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/08 - Power Options.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/09 - Mobility Center.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/10 - Programs and Features.lnk
    .lnk
  • Default/AppData/Local/Microsoft/Windows/WinX/Group3/desktop.ini
  • Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Control Panel.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Server Manager.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini
  • Default/AppData/Roaming/Microsoft/Windows/SendTo/Compressed (zipped) Folder.ZFSendToTarget
  • Default/AppData/Roaming/Microsoft/Windows/SendTo/Desktop (create shortcut).DeskLink
  • Default/AppData/Roaming/Microsoft/Windows/SendTo/Desktop.ini
  • Default/AppData/Roaming/Microsoft/Windows/SendTo/Fax Recipient.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/SendTo/Mail Recipient.MAPIMail
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/Desktop.ini
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/Magnify.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/Narrator.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/On-Screen Keyboard.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories/Desktop.ini
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories/Notepad.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Maintenance/Desktop.ini
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Command Prompt.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Control Panel.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Default Apps.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Desktop.ini
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Devices.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/File Explorer.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Run.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/computer.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell (x86).lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell ISE (x86).lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell ISE.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell.lnk
    .lnk
  • Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/desktop.ini
  • Default/NTUSER.DAT
  • Default/NTUSER.DAT.LOG1
  • Default/NTUSER.DAT{5e1b4267-a215-11e7-b652-a26490625a7d}.TM.blf
  • Default/NTUSER.DAT{5e1b4267-a215-11e7-b652-a26490625a7d}.TMContainer00000000000000000001.regtrans-ms
  • Default/NTUSER.DAT{5e1b4267-a215-11e7-b652-a26490625a7d}.TMContainer00000000000000000002.regtrans-ms
  • Default/NTUSER.DAT{f5b13604-4b48-11e6-80cb-e41d2d012050}.TM.blf
  • Default/NTUSER.DAT{f5b13604-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000001.regtrans-ms
  • Default/NTUSER.DAT{f5b13604-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000002.regtrans-ms