06591aedd5184314357c0c8baa7458cc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
06591aedd5184314357c0c8baa7458cc_JaffaCakes118
Size 373KB
Sample240428-3wp7vace8z
SHA256 7069936f40fca7c573d2423584820ade796e886acdf17e9efbe3fc83c3beceb6
MD5 06591aedd5184314357c0c8baa7458cc
SHA1 4a5380cda404df7d4455129f4b6909e4b6d1ba07
SHA512 d6bef2146d0e785d6d4cdcb9e3b5e9a631be8ed7ba5a0ff238c5d2ba751ab9fa63f80ce8271bde885900a14c9fa2dd677b82ce0f9dcfc3ceb3064a88d7dfcdf4
SSDEEP 6144:WBTqByUV0t59ATt3mbnMbUgtS3yXV9jr3AQGEpiR0UI3pMiFzuswV1k6Em:WUBdm5WtwMwiXrrgUhui9wV1Ym
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION.exe

File Explorer

06591aedd5184314357c0c8baa7458cc_JaffaCakes118

.rar 373KB
QUOTATION.exe

.exe 656KB

06591aedd5184314357c0c8baa7458cc_JaffaCakes118

SHA256 7069936f40fca7c573d2423584820ade796e886acdf17e9efbe3fc83c3beceb6
MD5 06591aedd5184314357c0c8baa7458cc
SHA1 4a5380cda404df7d4455129f4b6909e4b6d1ba07
SHA512 d6bef2146d0e785d6d4cdcb9e3b5e9a631be8ed7ba5a0ff238c5d2ba751ab9fa63f80ce8271bde885900a14c9fa2dd677b82ce0f9dcfc3ceb3064a88d7dfcdf4
SSDEEP 6144:WBTqByUV0t59ATt3mbnMbUgtS3yXV9jr3AQGEpiR0UI3pMiFzuswV1k6Em:WUBdm5WtwMwiXrrgUhui9wV1Ym
MD5 SHA1 SHA512 SSDEEP

QUOTATION.exe

SHA256 9586c7e95bd2c4807b9e946ac4fd97e646ac9dd52b4afc781fa85af04c7a92dd
MD5 7d136173ee6ca3ead217c72410f365fe
SHA1 c1889660051cd20b88fa8d05abe5d18f0987d73b
SHA512 1c5e6839a48044acfcd7765634b239a7692412006237fff21d46a244cdd32c781a556f875fcc3c8c7efa4a62861c1e13ec8fc2dc09e5a61d4ea486c528ac8375
SSDEEP 12288:GPOuvPFClYKfrf9fN30Wvza5TXpGvgRKyC8OQg/1PFSiKlBz:GGIPQYKT9lcx0viKyC8o/1Gn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

362584

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

350KB

Virtual Size

350KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

227KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

06591aedd5184314357c0c8baa7458cc_JaffaCakes118

QUOTATION.exe

generic