a3f7e5c2164d5386bb4161fc9e8e0881_JaffaCakes118

General

Target
a3f7e5c2164d5386bb4161fc9e8e0881_JaffaCakes118
Size 531KB
Sample240403-xlhr5aaa78
SHA256 9688972a550182710459937ac8beaf2648614e12b041729732c6c31503b1aff7
MD5 a3f7e5c2164d5386bb4161fc9e8e0881
SHA1 44cd5fdf36eea5df109549108f7ca371ca197057
SHA512 ab63a704f67f98dbb9ba73df6ae9bcda5677821512f3709626f29a497d4b692a6a6c9ca5d5e37960b8564c5e87aee69ec495159c1c0c7b7558e09d1cb5ec0af2
SSDEEP 12288:sseq5cNHSyfeM8RwvQFWupJY1lC3eVXgtsmyEyjwysS7EvdAXJd60:sseBN0RQCKCDZyjAS7uUz60
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Scan0020.exe

File Explorer

a3f7e5c2164d5386bb4161fc9e8e0881_JaffaCakes118

.rar 531KB
Scan0020.exe

.exe 638KB

a3f7e5c2164d5386bb4161fc9e8e0881_JaffaCakes118

SHA256 9688972a550182710459937ac8beaf2648614e12b041729732c6c31503b1aff7
MD5 a3f7e5c2164d5386bb4161fc9e8e0881
SHA1 44cd5fdf36eea5df109549108f7ca371ca197057
SHA512 ab63a704f67f98dbb9ba73df6ae9bcda5677821512f3709626f29a497d4b692a6a6c9ca5d5e37960b8564c5e87aee69ec495159c1c0c7b7558e09d1cb5ec0af2
SSDEEP 12288:sseq5cNHSyfeM8RwvQFWupJY1lC3eVXgtsmyEyjwysS7EvdAXJd60:sseBN0RQCKCDZyjAS7uUz60
MD5 SHA1 SHA512 SSDEEP

Scan0020.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f88b736fe32b6e458ce63fb67b8bf0ebf6388e6e35e23bf9bcb46893375115f1
MD5 a2db85fcad3878617112ac3266282587
SHA1 57fb3301594c5577e6c39fdb6388883995cf24d6
SHA512 742b317d09599b21ead1b570ebfdc0dc27197755456090041d56fb2c1e1077ac7f9cbbf77b82d567155db5090acabbae6f8cb1b1692df61ab1439d1cebcc0cbc
SSDEEP 12288:KI+asIzXZ9hvqT2dsWA+DMmyA8wyFtySS7WEZ2a6GwIL8XzuH0:flyuR1DMmryDE4g
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

658046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

a3f7e5c2164d5386bb4161fc9e8e0881_JaffaCakes118

Scan0020.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

a3f7e5c2164d5386bb4161fc9e8e0881_JaffaCakes118

Scan0020.exe

mscoree

dotnet