General

  • Target

    550c99fe48b12f980ec3e1cf44c9e68d_JaffaCakes118

  • Size

    92KB

  • MD5

    550c99fe48b12f980ec3e1cf44c9e68d

  • SHA1

    49bd4d92ed5e1a186e327ba81c0b0b5530df06dc

  • SHA256

    af0b9adb856b370e83f0f43001edde529094dfce83b8a18b2031a64960829eae

  • SHA512

    ae317f1bb055bcfd2cc05fab748ad4d7d3602150ac58eefaa7d117772d756123e3cc421a913eafd73f9bae7e1bdca7452ab982516d9a3dc61c32fc62693a9413

  • SSDEEP

    1536:SIornVUkrPqeHHLqhLVYZPdNBg8ipEA9CuJyT4LfMeMrP2RCaOSAVS1TKMXFCEwb:eVdmCrYVY1nEpEeE4LfBRMaO7Ift01

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 550c99fe48b12f980ec3e1cf44c9e68d_JaffaCakes118
    .rar
  • MD5ChecksumTest.exe
    .exe windows:4 windows x86 arch:x86

    45d8cb55bcfec04939099fc1affdfcce


    Headers

    Imports

    Sections

  • VX CHAOS FILE SERVER - Virii, Worms, Anti-Virus, Hacker Tools, Warez, Codes.url
  • VX CHAOS.nfo
  • VX CHAOS.txt
  • botkiller.cpp
  • botkiller.h
  • config.h
  • d3des.c
  • d3des.h
  • dbot.dsp
  • dbot.dsw
  • dbot.opt
  • downloader.cpp
  • downloader.h
  • features.txt
  • ftpd.cpp
  • ftpd.h
  • include.h
  • main.cpp
  • main.h
  • manuals.txt
  • md5.cpp
  • md5.h
  • misc.cpp
    .vbs
  • misc.h
  • netapi.cpp
  • netapi.h
  • patcher.cpp
  • patcher.h
  • qvncpass.cpp
  • qvncpass.h
  • res.rc
  • rfb.h
  • scanner.cpp
  • scanner.h
  • strings.cfg
  • strings.h
  • stringsbckup.txt
  • tcpip.h
  • version.c
  • version.h
  • vncps.cpp
  • vncps.h
  • vxchaos or die.jpg
    .jpg