0cd68ba9e64c68b500c04bb3300f0a0a_JaffaCakes118

General

Target
0cd68ba9e64c68b500c04bb3300f0a0a_JaffaCakes118
Size 475KB
Sample240501-3balnacb89
SHA256 e9669d064c0d0c0f68d4c73e909625f2654567ceb936f08e00801e222635145d
MD5 0cd68ba9e64c68b500c04bb3300f0a0a
SHA1 7a0b430239df5e3a73ece85180b51ce07688ea4a
SHA512 bbc465b592893610ecab9ea2bfd3a8161f81c163d758896bd930abcd11f91b74dc9a5bd8c96fe544d3531754ef24060749ed919eb4c3bc885248c15082ffcc15
SSDEEP 12288:ymAWK9zZE0Zy0+BWR9s3PDKLMuZ1GZvOTvtXMcvOLjo:nK5rZGWRe/YGU7ULjo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TNT AWB TRACKING DETAILS.exe

File Explorer

0cd68ba9e64c68b500c04bb3300f0a0a_JaffaCakes118

.rar 475KB
TNT AWB TRACKING DETAILS.exe

.exe 582KB

0cd68ba9e64c68b500c04bb3300f0a0a_JaffaCakes118

SHA256 e9669d064c0d0c0f68d4c73e909625f2654567ceb936f08e00801e222635145d
MD5 0cd68ba9e64c68b500c04bb3300f0a0a
SHA1 7a0b430239df5e3a73ece85180b51ce07688ea4a
SHA512 bbc465b592893610ecab9ea2bfd3a8161f81c163d758896bd930abcd11f91b74dc9a5bd8c96fe544d3531754ef24060749ed919eb4c3bc885248c15082ffcc15
SSDEEP 12288:ymAWK9zZE0Zy0+BWR9s3PDKLMuZ1GZvOTvtXMcvOLjo:nK5rZGWRe/YGU7ULjo
MD5 SHA1 SHA512 SSDEEP

TNT AWB TRACKING DETAILS.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 408b676c05cde3623e9271d39c20ec19aaa9ad9882db0f08451442379409be99
MD5 a2160c54b5929dd3f48a2a37eadf3920
SHA1 35868869844c5ed2dee892fd5f374573d2197ae9
SHA512 3fd7356e2687dbb3e2d8447d49b482407afdc6b9e47c60ecfbab8d13ab974db043ffa79ea919eca6300f7ba3a574aa15020607d9d37b847785b999aebe1769c3
SSDEEP 12288:hf7K0Zn2uP81g3C2L8w+wasqwn1bIIB5V5ci3cf1QUJz/xHUXRlW3T/PC3f:hFZn2wxCHDx0hleTi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

630794

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

0cd68ba9e64c68b500c04bb3300f0a0a_JaffaCakes118

TNT AWB TRACKING DETAILS.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0cd68ba9e64c68b500c04bb3300f0a0a_JaffaCakes118

TNT AWB TRACKING DETAILS.exe

mscoree

dotnet