87f72e4c1c61eb7baf0540e4088a127a_JaffaCakes118

General

Target
87f72e4c1c61eb7baf0540e4088a127a_JaffaCakes118
Size 13.4MB
Sample240402-knd6hace95
SHA256 6d6af288259fb769ab5ed93a44069e3a48607dbb20152f711e73faff8ec0a906
MD5 87f72e4c1c61eb7baf0540e4088a127a
SHA1 ef8644512934bba4ac43498ee078945aabb2d2cf
SHA512 e2c6254e7a6761b4f2e67ea6c80eb784cd2f335f9c0db24a73b8b7a0a669dd61056adf94033d0c5e9205f33eb6b74ce2a4da6b61989cfd81dabcac1eac4b77cf
SSDEEP 393216:Vth2EqbloYK1YbTACfECvvcgBZ7DCQPW:gEqydURf9BFDCQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87f72e4c1c61eb7baf0540e4088a127a_JaffaCakes118

File Explorer

87f72e4c1c61eb7baf0540e4088a127a_JaffaCakes118

.exe 13.4MB

87f72e4c1c61eb7baf0540e4088a127a_JaffaCakes118

SHA256 6d6af288259fb769ab5ed93a44069e3a48607dbb20152f711e73faff8ec0a906
MD5 87f72e4c1c61eb7baf0540e4088a127a
SHA1 ef8644512934bba4ac43498ee078945aabb2d2cf
SHA512 e2c6254e7a6761b4f2e67ea6c80eb784cd2f335f9c0db24a73b8b7a0a669dd61056adf94033d0c5e9205f33eb6b74ce2a4da6b61989cfd81dabcac1eac4b77cf
SSDEEP 393216:Vth2EqbloYK1YbTACfECvvcgBZ7DCQPW:gEqydURf9BFDCQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

44184880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mW�/��o~�Za��W�ֆ��WUˢ�:w� '��o��ǯ=݋�&0�<��j��{Č|QMۑ�U-k��{�,-�-��`8v$v6VgR^� ��s�`�=��r��C��qjN��@�O�J��V��y��i�{��=�Hj��>�[e0N�p3g,N`�fE�>��H��$E|n�(�nc:��p06Zd�$�'iJ�/"�2�k/1v�,1 ��u?$��!=��[��% �::��k!T��Gû�9'��Aj��t�\��w��BUӔ��jй�,I�]�/�'��?��Kޚ=��XF�� ܻ�Y+5��5->]\�ć�N�e��-�K_J�l�N�+�v��I]MgV��1V+�%��~�sj�wG�cN��%Dˁ�%�;F"s��/kn� � $t*Y��$�{߇X�I��Q��b^TJ��j}��jV��sa! F>�ˋY@Xװ�RÜ��4�!×6{��Ui��[�ǹG��HQ�ò��:��P�[?`�7��GN֯��P=��M��K og��U3��s�9(�� `�ת�#�k5t�z��ۚ'g�p��à� O�o �͒I��@��R��c�WB��<�X�k)"�ά=��go��׬y/�2+K��O�(�~ԷD��Q(�շue�;ſ��w�_t�\�~��$?s짟�D��S�B��$g��`Z�U�$�G5��Kw��`s�x�E��̀<M(-.�x*�ܳ?�~&�V�?��>�G��<'4zN9�U� '�{<�`�l��Ui��w�k��[㉱h��h�o� �f�6�y�o�4�(�&�_*/a�Ԕ��"^�m�}l��k�R�@:y��ں�{|g�4w��WR��6^� D�﹎�� +��3��8�#f��+��E��~�LZ�O�%R2��>��O�-3Rߘ�I�RV��Y<[S�O�iӅ�;.tcu5��}[%�jO�'��%�X�]ԎyG��׿��?C@��L��!U�N�pL�cmac�"�|L�\��IzUizrl c�'�KeN�"A(�Q��h;�Xb`Y%Q��Ro�'��<�S��V��.��<��<�_�~��`�j��D�Ώv��i爛�5w= �+��5�� xp�p�)��n��Nr*��SS��ߥ6t(�+OL��'�z�u�ՎD �8p�K��X��*�6ԯN��S��H��d��&��G��%`�&r�cQN.��k��Z:w�{8�.��+��߽��t��fޠ^[�x>J(�H0&��q�B��,��,��y��p2cg ��#-�}��c�7x��3�tGy�u��`��ZY�w��k#m�0 ��]r�wh��s��]i@�^�w D�� 3M��Y�Nbw��{׬�{�� ^�}dM��if�~h��w�8��8y��Z��u�0�/N/�CG�B�I��L��Cq��8L�cP#Q)�� D&w��9�E��"UpЋ ��)!�HтFTFb�u�.`N] �C�la[�YX��^Mg�vW;�U"�B�a#BCIҡ��][�>��C�(q�r��?��8��"��e4�)��G4S�3�iX��S��*�h�f��]�rq�/�9.}0��\��n�5��GV��B��p��²3.�@�t�Y-��\s��y�T��,^!?� �,Fkc�5z.�SV�[ ��,��<G��R��{(ܣ�őJ#/46�M��@�.]��U��=?�=�`��;^i��I�Z�>*">�=|��㡜if�1"��r��j�(]G4"�ׇk��/r�.Y�hNDW!�W'?y|{O@X"╆?,tA�+��J)��#��3]��|�)f|��.$w��4��FL0�u@4yQD/V-��t�Z}� \�T��hd}:L�)�]�R�\��RH*X��ꕽ��>I�<+��}��/ɮ��!޻�o��Z��Zq��z��Y��D6��N/��?��1�F=:y��?V��:%C�k��Ģ�M��^d�I!,��f��N�� 2rC�<��_&�G��Sd��y��ie��H�#:� ޑǘ��'��Am��ya!�} a��|��I��}�Q~��g�EK�"� ;7��ⅿW�nNRt��ō��ɮ�rY͏m��!5!$Z��ڮ΅QnT�s궠�jj�q�c�=g�VU��?�b�.� %Yq~��J�W�r ��8f�� N ��k��f��[zB;J��zj+�?��J�=�W߁��R��F�|sѭ�a��S��W.��e�v��W��Z�� }��K76֫d�M,��)�g�av��\-�1��oO��5��Ze�6O��Ԧ�ah�.=Oz�gt�Y��>:�/�X��G��ꕈ��i9�ٟ��c� �#�;\��X�3#)Vʝ��c��qWr�l�r�t��P�6�� ؖ��F�[]@1��q5��;�D�.��2Ls-��JΈJt�},¼B!��y�S��ɗP�� _�J�j��V�8l�JK��"��h�l=-�c�2XwVzrGYa��g��d5 ��#��q�CO��y�� ۰�1P2�6�npC#��s+�$&B��ĜJ~و��{�s̑vX��=�q6��w_��/u��bl��MF� ��u��qԮ;��f�n2>(Gu�$,Uݼ-��PrD�GM[��a��F�.�L�`��a� �@6 `;U�#��bj .=fNDHMRu��T�q�+��)q�ˮD��5𱡘R��f��0�<*�^��g_A�e��?��9��j��)��k˱��'�� (�}~ v:��?zG�Z��̎ �XG2m� ��'��H�04�QF�fV�Se�B��۹�Q_c X7b�|i��Bmfɩ��"gm��k�b��`�&��FZ�^��Ӌh��k�JC��E�{Bc�Y+��o�+�$B<��ʙ&Gb@|��h��{�g��*�D�N�Kcȑ�d��Z]iޅK��/\X�ㆸ��$l��`�#��`s'�h��>z�*��O?�*�{�4��]�%�e��4��!�;^��-�Ź��:I�p�*�n��M��c��>��Y7n!Ƞ?�x gBHN��|G��!(��H0��Zk�허��u�g{`:bج��d��Q�>F�� 6��:�_k�eӐ7V��iH?�b(�,9��I9+�$h}��-��2�x��紐6�(�Ll9� ��pq��߁��>��n׸&7�� rE��ݲe��[Z��d��0�5�T.qt��!�}�\��݈˸'�0��ଚ�X/a-� RM��V��S��[��΀

Sharing

General

Malware Config

Signatures

File Explorer

87f72e4c1c61eb7baf0540e4088a127a_JaffaCakes118

generic