e273b01bade5ee7d1ebcee1643212397_JaffaCakes118

General

Target
e273b01bade5ee7d1ebcee1643212397_JaffaCakes118
Size 359KB
Sample240406-nqtkraaa38
SHA256 614ff5c0107fc94f69cd80eacc9d3f70a36330d5cd369064f477b15823050898
MD5 e273b01bade5ee7d1ebcee1643212397
SHA1 15cc28fbd8232a12a08f8db74370e35cf123f630
SHA512 65ffa9c4232475a529fb8d03e965b821bb2f2cc542bd849396f59f73bfd8826049062f2c5e7ccb68389f24a3f1334acc8edc9418321722e5e16cc5cdaccd16aa
SSDEEP 6144:XZXszRysVG1W2tLlGvPGDnzaloMcBGEutBY4v4e4RVKDZIr6d7JBwBwyVTg9xSqj:JO6HDnzaSYzNd4qmglitTYj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pos.exe

File Explorer

e273b01bade5ee7d1ebcee1643212397_JaffaCakes118

.rar 359KB
pos.exe

.exe 404KB

e273b01bade5ee7d1ebcee1643212397_JaffaCakes118

SHA256 614ff5c0107fc94f69cd80eacc9d3f70a36330d5cd369064f477b15823050898
MD5 e273b01bade5ee7d1ebcee1643212397
SHA1 15cc28fbd8232a12a08f8db74370e35cf123f630
SHA512 65ffa9c4232475a529fb8d03e965b821bb2f2cc542bd849396f59f73bfd8826049062f2c5e7ccb68389f24a3f1334acc8edc9418321722e5e16cc5cdaccd16aa
SSDEEP 6144:XZXszRysVG1W2tLlGvPGDnzaloMcBGEutBY4v4e4RVKDZIr6d7JBwBwyVTg9xSqj:JO6HDnzaSYzNd4qmglitTYj
MD5 SHA1 SHA512 SSDEEP

pos.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 429add11efba80f4e7d037b428d2dfc76e2c6904b5ff94ab0ccaa1fb4d665348
MD5 6d626fa97d51af21b9856d7c0719ff7d
SHA1 0c65de2146cfa001fcbc631f84fb0aad7f3ee3ed
SHA512 4964b60118d9049de1f87fcedddea4d32a176efb91b9bbf974832225b8a0fcfc5630a04bc6f45c31e8cb311f71497c1d14a38fd051d06dca03b19ee478b6f13a
SSDEEP 6144:S89wAzW/2chyKAW2cYSJkXphO2H3RWxJ85KImSGfOgQrhvo9:S8Wn2eyWKWIUJ85Bmilvo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

419118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e273b01bade5ee7d1ebcee1643212397_JaffaCakes118

pos.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

e273b01bade5ee7d1ebcee1643212397_JaffaCakes118

pos.exe

mscoree

dotnet