66412428ecdc8282acc81035c3690554_JaffaCakes118

General

Target
66412428ecdc8282acc81035c3690554_JaffaCakes118
Size 331KB
Sample240401-dvkhjacf23
SHA256 fd3bf745ea149f34597a9ac8ca5974b87be3ff4fe7ed337ea7151b298e0cc42d
MD5 66412428ecdc8282acc81035c3690554
SHA1 e7423b04160c8520a4478ca01cf1f3208b5d4bd3
SHA512 fa0fbe86b339afe3e9650c48b8e0204fcbae2e2e4c6118f7e8cd3f4e377ccc4bb4f82900774a55989c58f503015f059484c9d7177e12d265cdf689494cf135f0
SSDEEP 6144:hB4LBRTRwZLEB9nKhP6w6A2F2009LpXMJ6CArPRvLTCs/lrfh:ML7TR869nY6Ad009Lp8oCcRv/CSz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase_Order.exe

File Explorer

66412428ecdc8282acc81035c3690554_JaffaCakes118

.zip 331KB
Purchase_Order.exe

.exe 598KB

66412428ecdc8282acc81035c3690554_JaffaCakes118

SHA256 fd3bf745ea149f34597a9ac8ca5974b87be3ff4fe7ed337ea7151b298e0cc42d
MD5 66412428ecdc8282acc81035c3690554
SHA1 e7423b04160c8520a4478ca01cf1f3208b5d4bd3
SHA512 fa0fbe86b339afe3e9650c48b8e0204fcbae2e2e4c6118f7e8cd3f4e377ccc4bb4f82900774a55989c58f503015f059484c9d7177e12d265cdf689494cf135f0
SSDEEP 6144:hB4LBRTRwZLEB9nKhP6w6A2F2009LpXMJ6CArPRvLTCs/lrfh:ML7TR869nY6Ad009Lp8oCcRv/CSz
MD5 SHA1 SHA512 SSDEEP

Purchase_Order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 11b68b5d2bc9b738db1dea44b2cf8b4a03a7c49e85ea81f1a15bdb7c1ce46a1b
MD5 6773242966c38d2e2bee45f4097e1503
SHA1 87c4150c151c0d8c73f58ca7d4def7241eec94be
SHA512 26beef97685a07c3f7fbc165af0cc137669654a1d5439a44f16603b04c2382771636f8004ce19ebdd402e133580ba48a252d04d4b7442b72340dbb4cf1358dd3
SSDEEP 6144:6Je+8ThPaF+c09JpXMJcCapP9vNfI4ujU1hwJFLeb:tThPHc09Jp8yCi9v8jiwJFLeb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

612798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

66412428ecdc8282acc81035c3690554_JaffaCakes118

Purchase_Order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

66412428ecdc8282acc81035c3690554_JaffaCakes118

Purchase_Order.exe

mscoree

dotnet