1564f252ee0a595a9fed9790e279e2ba_JaffaCakes118

General

Target
1564f252ee0a595a9fed9790e279e2ba_JaffaCakes118
Size 450KB
Sample240329-b4pgqseb8s
SHA256 4df5e65bd070548174062805ec71cc0c4d737892f777ab35395043038e504fd5
MD5 1564f252ee0a595a9fed9790e279e2ba
SHA1 37b5dd7c0216ff25f7ceb3454f1dae5c5ef5ce9f
SHA512 9482cb93cfe42d05d3605960274e3cfbf4d6df5a52a91d281c0acdc695437ffb057f655b8c1dfbd0663a2930fac5d6c6391b5c471663296d9f5cc5ec14ecf9ab
SSDEEP 6144:wU/wdfianbTa5st5MeiALm2vn51etMWf+OY3jgzTNpLjdbc+d1ghoGS+nKIOXSdq:ObuCaAq251IMWfojgrWsdGfOOf2t98bs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RG25LGSJ.exe

File Explorer

1564f252ee0a595a9fed9790e279e2ba_JaffaCakes118

.gz 450KB
RG25LGSJ.exe

.exe 722KB

1564f252ee0a595a9fed9790e279e2ba_JaffaCakes118

SHA256 4df5e65bd070548174062805ec71cc0c4d737892f777ab35395043038e504fd5
MD5 1564f252ee0a595a9fed9790e279e2ba
SHA1 37b5dd7c0216ff25f7ceb3454f1dae5c5ef5ce9f
SHA512 9482cb93cfe42d05d3605960274e3cfbf4d6df5a52a91d281c0acdc695437ffb057f655b8c1dfbd0663a2930fac5d6c6391b5c471663296d9f5cc5ec14ecf9ab
SSDEEP 6144:wU/wdfianbTa5st5MeiALm2vn51etMWf+OY3jgzTNpLjdbc+d1ghoGS+nKIOXSdq:ObuCaAq251IMWfojgrWsdGfOOf2t98bs
MD5 SHA1 SHA512 SSDEEP

RG25LGSJ.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f6744dd0f12c44cc62ab5c2b58e0c2877d3935d8e1205f39bc540e3a58a88bc1
MD5 1286bb98d40fcfd0628de30f8f5b9499
SHA1 366ac62da8aed0d425c1913277ae0d4d7a85a951
SHA512 ae27cd15daebdb5371ef2a93ecb24188160b19d48487d843c5d9ae3c43dc375f9c08283bedfb17142a4f6a5cc69b89042dd208897ab2208b3f18ed7a824f45ac
SSDEEP 12288:S+MTA2AkKT1IyEfQjixc8RGfOcRetV0TG4+vK+V2:S+MTA2eCcDg/0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

744974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

1564f252ee0a595a9fed9790e279e2ba_JaffaCakes118

RG25LGSJ.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

1564f252ee0a595a9fed9790e279e2ba_JaffaCakes118

RG25LGSJ.exe

mscoree

dotnet