Overview

overview

5

Static

static

5

insider/cgi/cgi.txt

ubuntu-18.04-amd64

insider/cgi/cgi.txt

debian-9-armhf

insider/cgi/cgi.txt

debian-9-mips

insider/cgi/cgi.txt

debian-9-mipsel

insider/compile.bat

windows7-x64

1

insider/compile.bat

windows10-2004-x64

1

insider/in.exe

windows7-x64

5

insider/in.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    fcb667a91f7f0be4ebe53db28e325844_JaffaCakes118

  • Size

    39KB

  • MD5

    fcb667a91f7f0be4ebe53db28e325844

  • SHA1

    ad2fd12c9ae2e31564f67b3994f30deb2013f7c0

  • SHA256

    e7cece4e645fed1621351c2637c92bedb0b538088336909aa2a135779cbbd731

  • SHA512

    c6a8aba27a8407a0a26855b6347e33b2d5130d04c1b8b77b08b7f2572d7980e1d881fc5672e6fa570c0bcae32dda8bde19c4a83e199714aadab9842704c1e000

  • SSDEEP

    768:Ki+rmEuQEIZg+8ayqFn3pkypa0XnnWT3ieE9tC1EYbDM:ngH8ayOKaLapm4M

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fcb667a91f7f0be4ebe53db28e325844_JaffaCakes118
    .zip
  • insider/README.txt
  • insider/base64.c
  • insider/base64.h
  • insider/binder/bind.c
  • insider/cgi/cgi.txt
    .sh linux
  • insider/compile.bat
  • insider/getput.h
  • insider/in.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • insider/insider.h
  • insider/main.c
  • insider/md5.c
  • insider/md5.h
  • insider/net.c