bd94921e09062c307e7623f51b34cd17_JaffaCakes118

General

Target
bd94921e09062c307e7623f51b34cd17_JaffaCakes118
Size 156KB
Sample240404-vd4nhsde89
SHA256 174bc4f1a50c1d54fbfa43ae69488412d518e40d46f013c0efd3a4b981403a7b
MD5 bd94921e09062c307e7623f51b34cd17
SHA1 611e2fa1a5e409e0b58a7ee6998c4002cd321cb7
SHA512 1c5587de641d5a33bde9cdbda76d100f80bd8541268ab652fbc2306ac4ac0a399375e602dd61b21899e87e870e0906ae312d7329a6b0f0cc20145813b2d26e45
SSDEEP 3072:ICKrkbCvdJVFzVrr8OpsCVfsulnXtM6SZ6Qs0G8RoQgGfho:ItkbiPVr5pfD26j0LgGf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd94921e09062c307e7623f51b34cd17_JaffaCakes118

File Explorer

bd94921e09062c307e7623f51b34cd17_JaffaCakes118

.exe 156KB

bd94921e09062c307e7623f51b34cd17_JaffaCakes118

IMPHASH d855fb3baadef1a5b10fe46aad6327dc
SHA256 174bc4f1a50c1d54fbfa43ae69488412d518e40d46f013c0efd3a4b981403a7b
MD5 bd94921e09062c307e7623f51b34cd17
SHA1 611e2fa1a5e409e0b58a7ee6998c4002cd321cb7
SHA512 1c5587de641d5a33bde9cdbda76d100f80bd8541268ab652fbc2306ac4ac0a399375e602dd61b21899e87e870e0906ae312d7329a6b0f0cc20145813b2d26e45
SSDEEP 3072:ICKrkbCvdJVFzVrr8OpsCVfsulnXtM6SZ6Qs0G8RoQgGfho:ItkbiPVr5pfD26j0LgGf
MD5 SHA1 SHA512 SSDEEP

windows:7 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

4

Major OS version

7

Entry point

32513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.init

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.init

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.init

Size

512B

Virtual Size

90B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

bd94921e09062c307e7623f51b34cd17_JaffaCakes118

comdlg32

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

bd94921e09062c307e7623f51b34cd17_JaffaCakes118

comdlg32

kernel32

user32

generic