Overview

overview

8

Static

static

5

3f2ae96ebf...18.exe

windows7-x64

7

3f2ae96ebf...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$R1/do.bat

windows7-x64

8

$R1/do.bat

windows10-2004-x64

8

$R1/undo.bat

windows7-x64

1

$R1/undo.bat

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f2ae96ebf17a0428a4956a2c36fd4c8_JaffaCakes118

  • Size

    58KB

  • MD5

    3f2ae96ebf17a0428a4956a2c36fd4c8

  • SHA1

    ed1b99a0d880ef8aec45f737e24623e5501d5fca

  • SHA256

    812b811e7ee8a2b7914e861792e53b138035d21958ccafa69f1f8481b21b1df9

  • SHA512

    5f19a3d75f24a49f64eb67ecb21b7228d16236c3063a6ea0c2bd6bbca3013465ff7fb570157ce279bbd8a112591ce650877d939c1a43c4b26373bbcea0f3aa0a

  • SSDEEP

    768:Ziz5UFE4kcQpndNJYPqodb4hV8fX6gQAxre+yKM1Z6BSr/LTzKFar4CSMIZ6tVCY:ZU0EXzdAPqodbJtJyKMKyz8VMcSbqa4s

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f2ae96ebf17a0428a4956a2c36fd4c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/QQ.ini
  • $PLUGINSDIR/top.bmp
  • $R1/do.bat
  • $R1/undo.bat