e9fb971f4f141b632f22ceb23903398e_JaffaCakes118

General

Target
e9fb971f4f141b632f22ceb23903398e_JaffaCakes118
Size 521KB
Sample240409-plsy4aab4z
SHA256 f326c53f26ba6a5cc5168e89fcc32dc4ce9a1fa907d9921db1a69e7d342f7c4b
MD5 e9fb971f4f141b632f22ceb23903398e
SHA1 3162651c539c1a0523c08cefa31618bc2a2e43a8
SHA512 f36d553e851a584382567e24b0a9a1cfc4561158e3f4005a1afbc0da999d6f2fbd0535bb8b3409a93dbfdc8b39527d782375fc891cd48ea9836ff5aebc8716f0
SSDEEP 384:RKFNjtU2enrfzCBgCC8Q0Tjj6vct9a7p1B3z+V4kht0W:oFifBeQ0XOs9a7zR+V4k
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9fb971f4f141b632f22ceb23903398e_JaffaCakes118

File Explorer

e9fb971f4f141b632f22ceb23903398e_JaffaCakes118

.dll 521KB

e9fb971f4f141b632f22ceb23903398e_JaffaCakes118

SHA256 f326c53f26ba6a5cc5168e89fcc32dc4ce9a1fa907d9921db1a69e7d342f7c4b
MD5 e9fb971f4f141b632f22ceb23903398e
SHA1 3162651c539c1a0523c08cefa31618bc2a2e43a8
SHA512 f36d553e851a584382567e24b0a9a1cfc4561158e3f4005a1afbc0da999d6f2fbd0535bb8b3409a93dbfdc8b39527d782375fc891cd48ea9836ff5aebc8716f0
SSDEEP 384:RKFNjtU2enrfzCBgCC8Q0Tjj6vct9a7p1B3z+V4kht0W:oFifBeQ0XOs9a7zR+V4k
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17436

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e9fb971f4f141b632f22ceb23903398e_JaffaCakes118

generic