e61588d0729ecc06f559537d258ffd91_JaffaCakes118

General

Target
e61588d0729ecc06f559537d258ffd91_JaffaCakes118
Size 387KB
Sample240407-273rmshe94
SHA256 53acd70a0b9a9463116c92c3f0d43faca4ccf8d6922117936ca4f53de6398403
MD5 e61588d0729ecc06f559537d258ffd91
SHA1 7421bd486c14dd3df9f520f1e4224806e6c823d5
SHA512 145d563ba528fe9d5b3f0e86efde4ecf62a8e64e2a696db022aa4af89caff34b8356a3e8fafdaae72481f260943b582be648dcb042d7d8d0d4906b4be2ff7122
SSDEEP 6144:fYAzwLWQGJpbDW54MJF5Z0s4eA33dNd+iVcc0t+h0N2gfU/dPErjXEbaJNW7zmKA:fi75usnA3NNtTY+KdfGEU6er5+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CI&PL-AWB-HEL-21-324-1.exe

File Explorer

e61588d0729ecc06f559537d258ffd91_JaffaCakes118

.zip 387KB
CI&PL-AWB-HEL-21-324-1.exe

.exe 444KB

e61588d0729ecc06f559537d258ffd91_JaffaCakes118

SHA256 53acd70a0b9a9463116c92c3f0d43faca4ccf8d6922117936ca4f53de6398403
MD5 e61588d0729ecc06f559537d258ffd91
SHA1 7421bd486c14dd3df9f520f1e4224806e6c823d5
SHA512 145d563ba528fe9d5b3f0e86efde4ecf62a8e64e2a696db022aa4af89caff34b8356a3e8fafdaae72481f260943b582be648dcb042d7d8d0d4906b4be2ff7122
SSDEEP 6144:fYAzwLWQGJpbDW54MJF5Z0s4eA33dNd+iVcc0t+h0N2gfU/dPErjXEbaJNW7zmKA:fi75usnA3NNtTY+KdfGEU6er5+
MD5 SHA1 SHA512 SSDEEP

CI&PL-AWB-HEL-21-324-1.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 92175af7571463e2114e8c8cd62de70ce9dd6757b67c77a051b0f6f2e52e30fe
MD5 e8ae8fe8fa5d7c83e3ebe26389eae1f8
SHA1 6fc0dd32bb26b5b85e4ae4b81a86bb80a1fd414b
SHA512 f31fc6d145078569b4932178c6f62bcff3f96da5aed2853a8eb5d5590ceb0c6d30fc6293ac4a75c4207f218dcbba8840035e5c0524d23ee98fed5b01450b5a42
SSDEEP 6144:WQGLpbDaj4MJF5Z6saGA33vNd+kVccYt+T0N2gfk/dP+rFXYbaJXS7zmKr0Y:995IsJA3/NBTs+Qdf2+q6UrR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

460102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e61588d0729ecc06f559537d258ffd91_JaffaCakes118

CI&PL-AWB-HEL-21-324-1.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

e61588d0729ecc06f559537d258ffd91_JaffaCakes118

CI&PL-AWB-HEL-21-324-1.exe

mscoree

dotnet