1f4e57c77e9b750a3f32741178ccb1e7_JaffaCakes118

General

Target
1f4e57c77e9b750a3f32741178ccb1e7_JaffaCakes118
Size 1.5MB
Sample240507-d1hk5aba86
SHA256 048e5a16f52e2a1b8769811c24ffb5dd12719d5666f2721c3f916a168814ad4e
MD5 1f4e57c77e9b750a3f32741178ccb1e7
SHA1 7ac4e317d1ac1861af24a42d4bc1ca27bb926db0
SHA512 492b4e96418158eef2823ff1227481a92f4a01d05773f83a59d46ce70f4258e445a1232f573c823f3c1f3276a625a059b52e1ef57a12244d6985a016765fc569
SSDEEP 24576:ounuxi3o3MVxOI1/DFLkACNz70EoDSN1ckH3anm+///gPCfoKXC2uxPYE/M/qT3q:ouj48VccFLkr70EfN93mBAvKXC2oYE/U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f4e57c77e9b750a3f32741178ccb1e7_JaffaCakes118

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

File Explorer

1f4e57c77e9b750a3f32741178ccb1e7_JaffaCakes118

.exe 1.5MB

1f4e57c77e9b750a3f32741178ccb1e7_JaffaCakes118

SHA256 048e5a16f52e2a1b8769811c24ffb5dd12719d5666f2721c3f916a168814ad4e
MD5 1f4e57c77e9b750a3f32741178ccb1e7
SHA1 7ac4e317d1ac1861af24a42d4bc1ca27bb926db0
SHA512 492b4e96418158eef2823ff1227481a92f4a01d05773f83a59d46ce70f4258e445a1232f573c823f3c1f3276a625a059b52e1ef57a12244d6985a016765fc569
SSDEEP 24576:ounuxi3o3MVxOI1/DFLkACNz70EoDSN1ckH3anm+///gPCfoKXC2uxPYE/M/qT3q:ouj48VccFLkr70EfN93mBAvKXC2oYE/U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

196608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1024B

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zwt

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

1f4e57c77e9b750a3f32741178ccb1e7_JaffaCakes118