Overview

overview

3

Static

static

3

e959abca95...18.exe

windows7-x64

1

e959abca95...18.exe

windows10-2004-x64

1

.rsrc/1049...IC.vbs

windows7-x64

1

.rsrc/1049...IC.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e959abca95402f8a1bea1b961b5cddf7_JaffaCakes118

  • Size

    6.8MB

  • MD5

    e959abca95402f8a1bea1b961b5cddf7

  • SHA1

    f57976b875028b6486f7a560ce50f79e4c078038

  • SHA256

    54a520e2d365c8ae602b886cc85805a319c4991370d37bd629245788cd9f6852

  • SHA512

    9490c780e82a04947357f97006812a17d39bac5cf5dda96f76d328e88b099ec6b13f43b662c8ec8327f18b32ce80e8126b8770921c8ada7e3d75cbf46b3ce11e

  • SSDEEP

    196608:Bp4WPIma4ANguc5sTST+3YMHDk77z0Ykl1FlYTXKFK2P:BrPIma4ANguc5sTSTAYMI77z0Ykl1z1P

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e959abca95402f8a1bea1b961b5cddf7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1d0fd4c44a4ecd5257a4c071c70a4490


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/FDARMTI
  • .rsrc/0/RCDATA/ISWILISVNFUVCVY
  • .rsrc/0/RCDATA/LELGXBUOBHMK
  • .rsrc/0/RCDATA/VWDPKH
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/DIC
    .vbs
  • .rsrc/1049/RCDATA/DRCLWXH
  • .rsrc/1049/RCDATA/GIKWPQHPQIXB
  • .rsrc/1049/RCDATA/JLJFCCGMQW
  • .rsrc/1049/RCDATA/MHGMEJT
  • .rsrc/1049/RCDATA/UOWIRAGCX
  • .rsrc/1049/RCDATA/WKKBMWUIUNBX
  • .rsrc/1049/RCDATA/WUQDILBIVWXTVDEAKEN
  • .text
  • .tls