Overview

overview

3

Static

static

3

f52cc035bb...18.exe

windows7-x64

1

f52cc035bb...18.exe

windows10-2004-x64

1

.rsrc/1049...IC.vbs

windows7-x64

1

.rsrc/1049...IC.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f52cc035bb6cd2fceeddbeb85802939e_JaffaCakes118

  • Size

    6.8MB

  • MD5

    f52cc035bb6cd2fceeddbeb85802939e

  • SHA1

    55b022516c0a95f2638c32717df9a329787e420d

  • SHA256

    406ef8a81479172983760462723c36e599c22198db066079beeac5b9cabee005

  • SHA512

    cbed875b809e63ce5394f69386a8444c23acb1a7c8b61bea5a591b807b92422fb71831530e81fc520de96b08dd5e22f323ce8b765aa9d8ac91c2505c5fbb13cc

  • SSDEEP

    196608:2XAGJrGWDSSTU4G//g7zD8cFyHGrsCEjPlQpNkP9Ecoohw0:2wGJrGWDSSTU4G//g7kcFRrsCEjPlQ4H

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f52cc035bb6cd2fceeddbeb85802939e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1d0fd4c44a4ecd5257a4c071c70a4490


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/CWYYSXB
  • .rsrc/0/RCDATA/DCWUWF
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/FLVDUJIWOHYM
  • .rsrc/0/RCDATA/LTTLKJBFELTXWGE
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/DIC
    .vbs
  • .rsrc/1049/RCDATA/KRHFPHOUKRM
  • .rsrc/1049/RCDATA/MIALJRTMIDYPLJDEJB
  • .rsrc/1049/RCDATA/NVJBESJVMEYVTD
  • .rsrc/1049/RCDATA/UFWYFHAWGDBI
  • .rsrc/1049/RCDATA/VCJCTUEFBCCTUPAA
  • .rsrc/1049/RCDATA/XKOYTDTIASWCHFA
  • .rsrc/1049/RCDATA/XOLAULBYMUOMU
  • .text
  • .tls