240421-qe6r2sce7w_pw_infected[.]zip

General

Target
240421-qe6r2sce7w_pw_infected.zip
Size 775KB
Sample240426-3d56cafb3s
SHA256 1c742b10c45081fb1d7f64ee7165b66dfa82f05bb5233f5567512043031e2633
MD5 7faed85b3127af215f3841d4f8fea3e8
SHA1 6510496968f0e0ad546eaa19f9748f2fe1f52f62
SHA512 fd873a2527ea2f94fa548c4ce31ad2f9b46622d6b80097933e388ca55c56f876af852cc8986728cad7fc47aebda1695aa24ccd12eced9f482a74157b91babe8c
SSDEEP 12288:U8m42d4TwuzIoUoFqo6n7+SvhAzgUS8xN2YpyOhRpyfmRfmnrnW0WjelZWp/q:aBJgW+SvpUrx0Yp7Tpsr1+p/q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ff59b59d6fb138bd3a588d89ea0fa1d7_JaffaCakes118

File Explorer

240421-qe6r2sce7w_pw_infected.zip

.zip 775KB
ff59b59d6fb138bd3a588d89ea0fa1d7_JaffaCakes118

.exe 1.3MB

240421-qe6r2sce7w_pw_infected.zip

SHA256 1c742b10c45081fb1d7f64ee7165b66dfa82f05bb5233f5567512043031e2633
MD5 7faed85b3127af215f3841d4f8fea3e8
SHA1 6510496968f0e0ad546eaa19f9748f2fe1f52f62
SHA512 fd873a2527ea2f94fa548c4ce31ad2f9b46622d6b80097933e388ca55c56f876af852cc8986728cad7fc47aebda1695aa24ccd12eced9f482a74157b91babe8c
SSDEEP 12288:U8m42d4TwuzIoUoFqo6n7+SvhAzgUS8xN2YpyOhRpyfmRfmnrnW0WjelZWp/q:aBJgW+SvpUrx0Yp7Tpsr1+p/q
MD5 SHA1 SHA512 SSDEEP

Password

infected

ff59b59d6fb138bd3a588d89ea0fa1d7_JaffaCakes118

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8e1c67e8ed76591ed779773be365b2b66440d958f1bf3556d4512f71836c3d2f
MD5 ff59b59d6fb138bd3a588d89ea0fa1d7
SHA1 fad22ded5983e8d5a9bffa398c3281670e496f46
SHA512 7c3017e263d812bac1ad57bf4ed4371fe7414cbde8af077e507811a9ce538d1fdbbb5d396f355792dae67cdf9c25e3b0128a036816d74a48ad68c62e5109054e
SSDEEP 24576:x6qt46zuDJ+ssHguZbtg2aLJ5eKSKmR9Fmt5J2NY9/:xZqARsV5VmFmzJ2M/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1332286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

240421-qe6r2sce7w_pw_infected.zip

ff59b59d6fb138bd3a588d89ea0fa1d7_JaffaCakes118

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

240421-qe6r2sce7w_pw_infected.zip

ff59b59d6fb138bd3a588d89ea0fa1d7_JaffaCakes118

mscoree

dotnet