147506bfe829e4ad245d28ccf1c73b9b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

147506bfe829e4ad245d28ccf1c73b9b_JaffaCakes118
Size

824KB
MD5

147506bfe829e4ad245d28ccf1c73b9b
SHA1

3f9e8a282f4588d9e5abfd2ca195110dca862159
SHA256

e9f7e90314b75632dd6703fc9f13680fff88ae691f12d2a8398b550fbdac6158
SHA512

a826cb17dcfe8962dbe8620358a1fe57ba57eb91b9a05f8a2d0f71766de14de5b29c03993a36c695b4a20ef655c03a34468f3172971bd3c06e85bc25a3c203d8
SSDEEP

24576:meIhK5hM8xt8Ds6qNgTnK+7xKjr+SwIUUE2kmQSYGS:me2K5jnaqNgarpogS

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack002/NBHELP.DLL
unpack002/NETBUS.EXE
unpack003/server2.0.exe

Files

147506bfe829e4ad245d28ccf1c73b9b_JaffaCakes118
.zip
netbus2.0client.zip
.zip
Host.db
NBHELP.DLL
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DisableClick
DisableKeys
EnableClick
EnableKeys
InstallKeyHook
InstallKeySpy
UninstallKeyHook
UninstallKeySpy

Sections

CODE
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 241B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NETBUS.CNT
NETBUS.EXE
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 805KB - Virtual size: 805KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NETBUS.HLP
NetBus.GID
README.TXT
Schedule.db
Script.db
netbus2.0serwer.zip
.zip
server2.0.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 47KB - Virtual size: 47KB

DATA Size: 1KB - Virtual size: 1KB

BSS Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 241B

.reloc Size: 4KB - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 5KB

Headers

File Characteristics

Sections

CODE Size: 805KB - Virtual size: 805KB

DATA Size: 8KB - Virtual size: 8KB

BSS Size: - Virtual size: 7KB

.idata Size: 10KB - Virtual size: 10KB

.tls Size: - Virtual size: 20B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 58KB - Virtual size: 57KB

.rsrc Size: 204KB - Virtual size: 204KB

Headers

File Characteristics

Sections

CODE Size: 439KB - Virtual size: 439KB

DATA Size: 15KB - Virtual size: 15KB

BSS Size: - Virtual size: 5KB

.idata Size: 10KB - Virtual size: 10KB

.tls Size: - Virtual size: 20B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 30KB - Virtual size: 29KB

.rsrc Size: 101KB - Virtual size: 101KB

CODE
Size: 47KB - Virtual size: 47KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 241B

.reloc
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 5KB

CODE
Size: 805KB - Virtual size: 805KB

DATA
Size: 8KB - Virtual size: 8KB

BSS
Size: - Virtual size: 7KB

.idata
Size: 10KB - Virtual size: 10KB

.tls
Size: - Virtual size: 20B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 58KB - Virtual size: 57KB

.rsrc
Size: 204KB - Virtual size: 204KB

CODE
Size: 439KB - Virtual size: 439KB

DATA
Size: 15KB - Virtual size: 15KB

BSS
Size: - Virtual size: 5KB

.idata
Size: 10KB - Virtual size: 10KB

.tls
Size: - Virtual size: 20B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 30KB - Virtual size: 29KB

.rsrc
Size: 101KB - Virtual size: 101KB