e9e67f9aea33168c2b3bddd92f326ec1_JaffaCakes118

General

Target
e9e67f9aea33168c2b3bddd92f326ec1_JaffaCakes118
Size 21KB
Sample240409-nq4eysdh69
SHA256 3871ca5cb112077c12d6f1eed51c3b7e102d17a9cc1a2c636ff274752403ed36
MD5 e9e67f9aea33168c2b3bddd92f326ec1
SHA1 d5c13ece6bb59f86d70fd8d7e3004183e6af8004
SHA512 b1633fae0a6d7834916f9b5360a307be01f7659fec3d85b33c1ad0b51c6cfc3acda56b13141055b5c0b009f75b24694822d9ac664815625b13683333630008ee
SSDEEP 384:TPyZNjtU2mjpBhjji93NNiW3vBhzaCxeobUickYTzrNx2kP4+b:byZMfcNiOvBJ/xeRiVYvrNwkg+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9e67f9aea33168c2b3bddd92f326ec1_JaffaCakes118

File Explorer

e9e67f9aea33168c2b3bddd92f326ec1_JaffaCakes118

.dll 21KB

e9e67f9aea33168c2b3bddd92f326ec1_JaffaCakes118

SHA256 3871ca5cb112077c12d6f1eed51c3b7e102d17a9cc1a2c636ff274752403ed36
MD5 e9e67f9aea33168c2b3bddd92f326ec1
SHA1 d5c13ece6bb59f86d70fd8d7e3004183e6af8004
SHA512 b1633fae0a6d7834916f9b5360a307be01f7659fec3d85b33c1ad0b51c6cfc3acda56b13141055b5c0b009f75b24694822d9ac664815625b13683333630008ee
SSDEEP 384:TPyZNjtU2mjpBhjji93NNiW3vBhzaCxeobUickYTzrNx2kP4+b:byZMfcNiOvBJ/xeRiVYvrNwkg+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e9e67f9aea33168c2b3bddd92f326ec1_JaffaCakes118

generic