0dbc7d1d1a1a39909fc5bd569bc623bb_JaffaCakes118

General

Target
0dbc7d1d1a1a39909fc5bd569bc623bb_JaffaCakes118
Size 566KB
Sample240502-g25ntsdd34
SHA256 1f7d006c51d203f691d67a56b1f3b7cd80d33e96b36b359d48cdd837d281fc93
MD5 0dbc7d1d1a1a39909fc5bd569bc623bb
SHA1 f3063a4eead8c3d13950d843a80211c4c561beb9
SHA512 e2d4d8296ac78e3be7b4f8d308df5e759fa70694bd696cf21ad21ac6b26d0e2143d502e454fefffc78ec21b2cf459127a00ae58dfe5fa08a83bdfdf7f92a37fa
SSDEEP 12288:9g40W9O7y9w36HIUiYOfBQg3BlkRFxEA2oLyMnJih5th6gZ:HOe+36FgR30RHUhbogZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MxELZ3saa9aQNufK.exe

File Explorer

0dbc7d1d1a1a39909fc5bd569bc623bb_JaffaCakes118

.zip 566KB
MxELZ3saa9aQNufK.exe

.exe 617KB

0dbc7d1d1a1a39909fc5bd569bc623bb_JaffaCakes118

SHA256 1f7d006c51d203f691d67a56b1f3b7cd80d33e96b36b359d48cdd837d281fc93
MD5 0dbc7d1d1a1a39909fc5bd569bc623bb
SHA1 f3063a4eead8c3d13950d843a80211c4c561beb9
SHA512 e2d4d8296ac78e3be7b4f8d308df5e759fa70694bd696cf21ad21ac6b26d0e2143d502e454fefffc78ec21b2cf459127a00ae58dfe5fa08a83bdfdf7f92a37fa
SSDEEP 12288:9g40W9O7y9w36HIUiYOfBQg3BlkRFxEA2oLyMnJih5th6gZ:HOe+36FgR30RHUhbogZ
MD5 SHA1 SHA512 SSDEEP

MxELZ3saa9aQNufK.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8d87d1e973d1ee16d747824541196d5df60298f4a8b0e24cf0ad684bb69b779c
MD5 035d33a4798c4baca26c4e1c29730004
SHA1 105c51e37e962271334462f1bd440f8e4e3ad9ee
SHA512 f612ef1c177658827ed18ea2629dacff9188efbb413b4d883421deb76f625fbc44b23f2aefecd9527ff5c8f3e7513da3b9b5ed687f2914a3777679849917a583
SSDEEP 12288:shPg0W3O7y3G369OUyYUf9Q83zlQRFtwi2YLqwzdkbRNSHxSrSlrTSW90FxG0ol:NOeW36FKv3+R3yb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

655370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

0dbc7d1d1a1a39909fc5bd569bc623bb_JaffaCakes118

MxELZ3saa9aQNufK.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0dbc7d1d1a1a39909fc5bd569bc623bb_JaffaCakes118

MxELZ3saa9aQNufK.exe

mscoree

dotnet