General

  • Target

    15070b3da1a7b1ae034871f015cbcb10_JaffaCakes118

  • Size

    1.1MB

  • MD5

    15070b3da1a7b1ae034871f015cbcb10

  • SHA1

    ea11416ee971dcb8bd5ba5521ba967eab21efa6a

  • SHA256

    90331d65bba4cedc6cefe324427a7f49a5f833bda5d2ae0aff842d073e512fcb

  • SHA512

    7ed165423915463b405c1270d2d24b6602505b77de9fd36d27ce0a8d486e451c0847580d6a5510b9169f9d43f0219445788bb4723e9ee4aa86ddba4cb4073f62

  • SSDEEP

    24576:GKoCylCHuMrcQ40UWGZoA1jP7leWB06blUC8CVUda0S:XYCVH40coA1r7DZblUC8CVMad

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 15070b3da1a7b1ae034871f015cbcb10_JaffaCakes118
    .cab
  • cygintl.dll
    .dll windows:4 windows x86 arch:x86

    dca84b8d3f89d3469f87af6bd278a595


    Headers

    Imports

    Exports

    Sections

  • cygtcl80.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cygwin1.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • drone.dat
  • echo.exe
    .exe windows:4 windows x86 arch:x86

    1f524bb5feaa8212db4d3b64b9f76909


    Headers

    Imports

    Sections

  • firedaemon.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • fix.bat
    .bat .vbs
  • gen.reg
  • ncx99.exe
    .exe windows:4 windows x86 arch:x86

    9a07a268dfdfe636c092c15eecfb3042


    Headers

    Imports

    Sections

  • nickpool
  • noiis.reg
  • reg.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • servers
  • setup.bat
    .bat .vbs
  • setupgen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    c399e9ba676db1cb40f9be599839b1ff


    Headers

    Imports

    Sections

  • testsrv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tmpx
  • wget.exe
    .exe windows:4 windows x86 arch:x86

    64b4d0dfe484c121ecdd22890d3d6cd7


    Headers

    Imports

    Sections