14444c9c5db1ea8697998809b388650c_JaffaCakes118

General

Target
14444c9c5db1ea8697998809b388650c_JaffaCakes118
Size 3.3MB
Sample240329-a55pnsda4s
SHA256 b7e5029d6258a083904d38b575acd8eee6d49226a7c12282542cd8462320dea6
MD5 14444c9c5db1ea8697998809b388650c
SHA1 3e2c4b015ea01f502678cac5d1aeac5044b2dc34
SHA512 64c0631b0f8f0e41843befb43cd9e99ab91a6409b71a2864b312a534a65669003e35414231b4b55eb4afad490c9eefd693182088eadb5e45c809efb9da26c744
SSDEEP 98304:eEAu0XsEpAZQKRjXrNELnnU/T24+daUZ8:Eu0cxaKRjbNELOax
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14444c9c5db1ea8697998809b388650c_JaffaCakes118

File Explorer

14444c9c5db1ea8697998809b388650c_JaffaCakes118

.exe 3.3MB

14444c9c5db1ea8697998809b388650c_JaffaCakes118

IMPHASH baa93d47220682c04d92f7797d9224ce
SHA256 b7e5029d6258a083904d38b575acd8eee6d49226a7c12282542cd8462320dea6
MD5 14444c9c5db1ea8697998809b388650c
SHA1 3e2c4b015ea01f502678cac5d1aeac5044b2dc34
SHA512 64c0631b0f8f0e41843befb43cd9e99ab91a6409b71a2864b312a534a65669003e35414231b4b55eb4afad490c9eefd693182088eadb5e45c809efb9da26c744
SSDEEP 98304:eEAu0XsEpAZQKRjXrNELnnU/T24+daUZ8:Eu0cxaKRjbNELOax
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9031680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

1.6MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

awelvykc

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

hvygismu

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=30, id=241, version=40116,

count=199, id=243, version=40116,

count=36, id=242, version=40116,

count=6, id=199, version=41118,

count=28, id=259, version=24123,

count=359, id=260, productName=VS2019 v16.8.3 build 29335, version=29335,

count=10, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=92, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=4, id=208, version=65501,

count=1, id=209, version=65501,

count=3, id=203, version=65501,

count=580, id=1, productName=Unmarked objects,

count=2, id=261, version=23013,

count=5, id=206, version=65501,

count=42, id=260, version=24123,

count=133, id=261, version=24123,

count=138, id=265, version=24215,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

14444c9c5db1ea8697998809b388650c_JaffaCakes118

kernel32

comctl32

generic

Sharing

General

Malware Config

Signatures

File Explorer

14444c9c5db1ea8697998809b388650c_JaffaCakes118

kernel32

comctl32

generic