256ed9279e862367c01ffa17516be407_JaffaCakes118

General

Target
256ed9279e862367c01ffa17516be407_JaffaCakes118
Size 9.2MB
Sample240508-slem9acg82
SHA256 a6092efc5df98df216f74c336ca4bdfb209abb379a5b19ed1dd762e1ea84dc86
MD5 256ed9279e862367c01ffa17516be407
SHA1 8b3c3929b6cacfd929185198735dbbd592027a3c
SHA512 dc8e11e3b40c161f70f4e33ce1c78825c2f3d43b1d1b87e1cadd5a0f53ec98ef05288e694410184199e75f5edd0ae2e49c0a17212f91582b2486768b84819325
SSDEEP 196608:65JBlouy0o55xtPm+ZDJCFbAfo51L2Kz+/Bdvxz0/kH1afe:Gau5o5Xg+Z02o51BgJVce
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256ed9279e862367c01ffa17516be407_JaffaCakes118

File Explorer

256ed9279e862367c01ffa17516be407_JaffaCakes118

.exe 9.2MB

256ed9279e862367c01ffa17516be407_JaffaCakes118

SHA256 a6092efc5df98df216f74c336ca4bdfb209abb379a5b19ed1dd762e1ea84dc86
MD5 256ed9279e862367c01ffa17516be407
SHA1 8b3c3929b6cacfd929185198735dbbd592027a3c
SHA512 dc8e11e3b40c161f70f4e33ce1c78825c2f3d43b1d1b87e1cadd5a0f53ec98ef05288e694410184199e75f5edd0ae2e49c0a17212f91582b2486768b84819325
SSDEEP 196608:65JBlouy0o55xtPm+ZDJCFbAfo51L2Kz+/Bdvxz0/kH1afe:Gau5o5Xg+Z02o51BgJVce
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12002864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

3.4MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

101KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

15B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.imports

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.winlice

Size

Virtual Size

7.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

5.5MB

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

256ed9279e862367c01ffa17516be407_JaffaCakes118

generic