1453c521792d23f1f3a2c47df5b3c3a0_JaffaCakes118

General

Target
1453c521792d23f1f3a2c47df5b3c3a0_JaffaCakes118
Size 413KB
Sample240504-y4heradb89
SHA256 1546fc1f8e8447a730815af827134ccfd4316eeccdca1912bea7fbce2bfb627d
MD5 1453c521792d23f1f3a2c47df5b3c3a0
SHA1 f3aad7d220c3dfe4f38500cbb4d6da0fa0b22d39
SHA512 add81db3a2b2eb539aafd7b2eb34973111d79bb3e1fa7cb8a351b7193cc61c817d43fffa82201f7586dd823565319cfe81a14f73fac016860ac1eccaf10536ee
SSDEEP 12288:N4qJZBnp5caeIrUTqr/9vWtxgs7GNrXqUgIvyquD93SthsOFs:N4qJfpZeKABCNUQRBsEs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pdf.exe

File Explorer

1453c521792d23f1f3a2c47df5b3c3a0_JaffaCakes118

.7z 413KB
pdf.exe

.exe 661KB

1453c521792d23f1f3a2c47df5b3c3a0_JaffaCakes118

SHA256 1546fc1f8e8447a730815af827134ccfd4316eeccdca1912bea7fbce2bfb627d
MD5 1453c521792d23f1f3a2c47df5b3c3a0
SHA1 f3aad7d220c3dfe4f38500cbb4d6da0fa0b22d39
SHA512 add81db3a2b2eb539aafd7b2eb34973111d79bb3e1fa7cb8a351b7193cc61c817d43fffa82201f7586dd823565319cfe81a14f73fac016860ac1eccaf10536ee
SSDEEP 12288:N4qJZBnp5caeIrUTqr/9vWtxgs7GNrXqUgIvyquD93SthsOFs:N4qJfpZeKABCNUQRBsEs
MD5 SHA1 SHA512 SSDEEP

pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 cac9f27ac564c17317125db57af909b78a9134edc9992bc573f624666775fd66
MD5 622d432561004acfc474b3eb679b3c57
SHA1 54ac325a2f36fd1f804b6db6a69e73e6fbd6b83d
SHA512 4f37a0c6e8f62ca7f5ab88c8ce0039bde074e1394b6086a93f9cc47461ebc34d1cfc03646414435d26bc1283358a0aa31892a784ce4dff3ee3229b4954a92e1f
SSDEEP 12288:Pug52mXIrcT6Ne9vWtxgsGGNrNqUgcvyluD9otjt6gX4d0LCy:mgnXmVBJN28kjjtId0L
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

472574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

1453c521792d23f1f3a2c47df5b3c3a0_JaffaCakes118

pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

1453c521792d23f1f3a2c47df5b3c3a0_JaffaCakes118

pdf.exe

mscoree

dotnet