0e1fc303b84cecfd64a46a1f4b09cadf_JaffaCakes118

General

Target
0e1fc303b84cecfd64a46a1f4b09cadf_JaffaCakes118
Size 653KB
Sample240502-lfdqfaea5t
SHA256 d131161b8e0c51e4103076d72d2d2e6721ed221d12fcdad3958a83bd2923f832
MD5 0e1fc303b84cecfd64a46a1f4b09cadf
SHA1 edd2eed0eb8a842e2ab01fb14779d7e3a101adfd
SHA512 6fd21f17c112211ade4ec3ee8988deca94c217542e95fa12b3c54ef8c06d624bc51c3a1acdbb10cf4347be68443ae518a2f8ad943b216b475cd970c44988aecb
SSDEEP 12288:xQVhtyd+qrIjAhC/g/orSHeEJI6ILvF9PJzxCtV8xKFnf+:CVfyfthDWStZ+LC8xOnf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e1fc303b84cecfd64a46a1f4b09cadf_JaffaCakes118

File Explorer

0e1fc303b84cecfd64a46a1f4b09cadf_JaffaCakes118

.dll 653KB

0e1fc303b84cecfd64a46a1f4b09cadf_JaffaCakes118

SHA256 d131161b8e0c51e4103076d72d2d2e6721ed221d12fcdad3958a83bd2923f832
MD5 0e1fc303b84cecfd64a46a1f4b09cadf
SHA1 edd2eed0eb8a842e2ab01fb14779d7e3a101adfd
SHA512 6fd21f17c112211ade4ec3ee8988deca94c217542e95fa12b3c54ef8c06d624bc51c3a1acdbb10cf4347be68443ae518a2f8ad943b216b475cd970c44988aecb
SSDEEP 12288:xQVhtyd+qrIjAhC/g/orSHeEJI6ILvF9PJzxCtV8xKFnf+:CVfyfthDWStZ+LC8xOnf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

591232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

573KB

Virtual Size

573KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

161B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0e1fc303b84cecfd64a46a1f4b09cadf_JaffaCakes118

generic