f26f3aa9606f3fc0a8b04812fe43ad36_JaffaCakes118

General

Target
f26f3aa9606f3fc0a8b04812fe43ad36_JaffaCakes118
Size 565KB
Sample240416-cghlcage71
SHA256 66cf3947c98140b701e303a8e4956f1626ea23ff1d29dbd3dfb636bb98cfd178
MD5 f26f3aa9606f3fc0a8b04812fe43ad36
SHA1 1c4659985a841cb37421a2463117936194b6d7be
SHA512 5edada35533f2713a45e34f821f2601c71d6b23fe0959a29446345a9414da70f9cf919280cb80aaf178e28a608d2375f52c7b0bad39b034dd212427840a7a331
SSDEEP 12288:dyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGBZZYt0dbSVBw5:t1fqZCHwIr00taCiHplZZYOxS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f26f3aa9606f3fc0a8b04812fe43ad36_JaffaCakes118

File Explorer

f26f3aa9606f3fc0a8b04812fe43ad36_JaffaCakes118

.dll 565KB

f26f3aa9606f3fc0a8b04812fe43ad36_JaffaCakes118

SHA256 66cf3947c98140b701e303a8e4956f1626ea23ff1d29dbd3dfb636bb98cfd178
MD5 f26f3aa9606f3fc0a8b04812fe43ad36
SHA1 1c4659985a841cb37421a2463117936194b6d7be
SHA512 5edada35533f2713a45e34f821f2601c71d6b23fe0959a29446345a9414da70f9cf919280cb80aaf178e28a608d2375f52c7b0bad39b034dd212427840a7a331
SSDEEP 12288:dyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGBZZYt0dbSVBw5:t1fqZCHwIr00taCiHplZZYOxS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

499784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

484KB

Virtual Size

484KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f26f3aa9606f3fc0a8b04812fe43ad36_JaffaCakes118

generic