0249fe5dcd6070fe0fbdd68de94f420c_JaffaCakes118

General

Target
0249fe5dcd6070fe0fbdd68de94f420c_JaffaCakes118
Size 285KB
Sample240427-drm49aaf8s
SHA256 222ecb1623fd9dbff453071b71b2bd7f843a523c0a16e6d55d21c86da58a0c48
MD5 0249fe5dcd6070fe0fbdd68de94f420c
SHA1 1e94be241913aea6e087df6e5cc19d6e82895021
SHA512 d254147e7266076f06d361f78de8bc17b29cc2e6c788c6e0aeab53c60a85476288ae6dfaae221e4586035bfdc41115319c923b59fc920c75bd860f20b3feabb5
SSDEEP 3072:312wTnBD9sEWvPjtl1twZT1hWweKFDZOikhePA1ZwD5EI3bZk0wb54s:312wmPjtlTwZTPxF4EKE8flZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

0249fe5dcd6070fe0fbdd68de94f420c_JaffaCakes118

.exe 285KB

0249fe5dcd6070fe0fbdd68de94f420c_JaffaCakes118

IMPHASH a8f737d51812b6886d60e29c978f4242
SHA256 222ecb1623fd9dbff453071b71b2bd7f843a523c0a16e6d55d21c86da58a0c48
MD5 0249fe5dcd6070fe0fbdd68de94f420c
SHA1 1e94be241913aea6e087df6e5cc19d6e82895021
SHA512 d254147e7266076f06d361f78de8bc17b29cc2e6c788c6e0aeab53c60a85476288ae6dfaae221e4586035bfdc41115319c923b59fc920c75bd860f20b3feabb5
SSDEEP 3072:312wTnBD9sEWvPjtl1twZT1hWweKFDZOikhePA1ZwD5EI3bZk0wb54s:312wmPjtlTwZTPxF4EKE8flZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

28:ce:11:fd:c0:21:0c:71:5c:91:63:70:e8:1a:a6:33:34:75:e4:91

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Daniel Hareuveni,O=Daniel Hareuveni,POSTALCODE=6958301,STREET=Yair Rozenblum 15,L=Tel aviv,ST=Israel,C=IL

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

5

Entry point

25194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

0249fe5dcd6070fe0fbdd68de94f420c_JaffaCakes118

PE Signature issue

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

0249fe5dcd6070fe0fbdd68de94f420c_JaffaCakes118

PE Signature issue

kernel32

generic