f36e01d878b186c732dfa3f4efa2bf93_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
f36e01d878b186c732dfa3f4efa2bf93_JaffaCakes118
Size 97KB
Sample240416-nyfc4ahf29
SHA256 46a2459595ca402e7fbc5ac14beaaed273cb9d43c1f5588e0041b02a8ebf1503
MD5 f36e01d878b186c732dfa3f4efa2bf93
SHA1 3533896b36cbb08a7ce12d46c321910e254ad589
SHA512 2c92196c84d3f02f46f04343f9de1ddabbed4da1db95b240d4640944f4805355867e25383437b15427f3274fc883e7e883e343d1a010f0f92675ec22aa3ffc6c
SSDEEP 1536:fwbSNmbaQZ6//2+Khe4jaFbBNvukc3SRXg:td26//MheTNBsSRQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f36e01d878b186c732dfa3f4efa2bf93_JaffaCakes118

File Explorer

f36e01d878b186c732dfa3f4efa2bf93_JaffaCakes118

.exe 97KB

f36e01d878b186c732dfa3f4efa2bf93_JaffaCakes118

IMPHASH 3baf5198a5c82b57436352743d8c8225
SHA256 46a2459595ca402e7fbc5ac14beaaed273cb9d43c1f5588e0041b02a8ebf1503
MD5 f36e01d878b186c732dfa3f4efa2bf93
SHA1 3533896b36cbb08a7ce12d46c321910e254ad589
SHA512 2c92196c84d3f02f46f04343f9de1ddabbed4da1db95b240d4640944f4805355867e25383437b15427f3274fc883e7e883e343d1a010f0f92675ec22aa3ffc6c
SSDEEP 1536:fwbSNmbaQZ6//2+Khe4jaFbBNvukc3SRXg:td26//MheTNBsSRQ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/14

Size

1024B

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/102

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

f36e01d878b186c732dfa3f4efa2bf93_JaffaCakes118

kernel32

msvcrt

generic