General

  • Target

    07aab5f2aeacf2355bef57901379cd01_JaffaCakes118

  • Size

    311KB

  • MD5

    07aab5f2aeacf2355bef57901379cd01

  • SHA1

    35ed20a8a4dd9b0a83ed051f1e2b5b0ba42c0b47

  • SHA256

    abec3d9944231af2d9b1ae8116c29afd608ea631911ba0bf9d57738b41d942f8

  • SHA512

    d3458da7e10998f39b47cc45fd1733a9ab60c587abeb5055df72c7f5edbb9e5c825320315f7bb841c0d6658c7a1c5e061ea65a985e270ed0136071e1d5719af7

  • SSDEEP

    6144:ADctdrsunrntuCp6TRqElp0Of2d2MqNeAyfw/9fIztSNriYdIAGiCJehAIA9xqE8:AGiurt8TRb+Ld2MMyfwlmWrDBRA9xr8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 07aab5f2aeacf2355bef57901379cd01_JaffaCakes118
    .zip
  • FINDRAMD.EXE
  • FORMAT.COM
  • HIMEM.SYS
  • PSAPI.DLL
    .dll windows:4 windows x86 arch:x86

    3b5b4bad881057af15fc35648ebcf206


    Headers

    Imports

    Exports

    Sections

  • RAMDRIVE.SYS
  • SETRAMD.BAT
  • VNCHooks.dll
    .dll windows:4 windows x86 arch:x86

    10663ae9d2327fc3832135f92cef5c87


    Headers

    Imports

    Exports

    Sections

  • WinVNC.exe
    .exe windows:4 windows x86 arch:x86

    3e77c3e3fa0ce99c83d31d3cab555757


    Headers

    Imports

    Sections

  • hook.dll
    .dll windows:4 windows x86 arch:x86

    8fa420ec10640b15a867e4602d80e994


    Headers

    Imports

    Exports

    Sections

  • ncafec.exe
    .exe windows:4 windows x86 arch:x86

    c2009e6ec8f38b440644001aeb5861e3


    Headers

    Imports

    Sections

  • omnithread_rt.dll
    .dll windows:4 windows x86 arch:x86

    70eff6b665a3d3f9e1ed223fe515d5e4


    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:4 windows x86 arch:x86

    f86ae3774358e3107ed306b68ebe9eeb


    Headers

    Imports

    Exports

    Sections