25eb7471594388dfa1e1bca16b19f94a_JaffaCakes118

General

Target
25eb7471594388dfa1e1bca16b19f94a_JaffaCakes118
Size 659KB
Sample240508-vzh9pshd98
SHA256 a3f1de0f98f5a75b5fc523931eee8455cf096467bb54bc0e4da488ea6dc737cf
MD5 25eb7471594388dfa1e1bca16b19f94a
SHA1 3e4b9f41c6cb3a053f6b6c383d5eb238dfd88a8b
SHA512 2af86417f4a42e3ec0ee740e717421d362950aea4192bbecbc2f976de631c639293660e71207f42913b46e3aa09f9e30bf254b8dcabf8e66747785a10a0fe606
SSDEEP 12288:JTRdFP0lkgSyTAd1UKtU5FslxO+tDjOZHp9tVk3xZKLPw3TCyc/r:Xj828MUK6w8MjUHVG34ITc/r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DOC_94874893983478992873489302983743048583923.exe

File Explorer

25eb7471594388dfa1e1bca16b19f94a_JaffaCakes118

.rar 659KB
DOC_94874893983478992873489302983743048583923.exe

.exe 850KB

25eb7471594388dfa1e1bca16b19f94a_JaffaCakes118

SHA256 a3f1de0f98f5a75b5fc523931eee8455cf096467bb54bc0e4da488ea6dc737cf
MD5 25eb7471594388dfa1e1bca16b19f94a
SHA1 3e4b9f41c6cb3a053f6b6c383d5eb238dfd88a8b
SHA512 2af86417f4a42e3ec0ee740e717421d362950aea4192bbecbc2f976de631c639293660e71207f42913b46e3aa09f9e30bf254b8dcabf8e66747785a10a0fe606
SSDEEP 12288:JTRdFP0lkgSyTAd1UKtU5FslxO+tDjOZHp9tVk3xZKLPw3TCyc/r:Xj828MUK6w8MjUHVG34ITc/r
MD5 SHA1 SHA512 SSDEEP

DOC_94874893983478992873489302983743048583923.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 336272983fab8fef81adad8156f80d1b91060b152e3eeeb9530899adc307217d
MD5 bad0a833162e39d641882ecce81e9a47
SHA1 026f7e370b03b6c7557f98070b6d56e2b9ed97cd
SHA512 ea548949952e6b185d49651fcb9b97e3851b2eb11b661498d90f13ee7edf320e55775261994733684c31c2012ef6f968a5ba5a405e8c8d4066a2f9fbe1531d20
SSDEEP 12288:i6tyHCDxWn1q9I6/k+BNokPno3c+Bn6/yZEZ5TdSCGDyaod+ik4g8y3SoDvKxnJk:iI8n8Pno3xBCyZEcPW2rEloDvO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

876062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

25eb7471594388dfa1e1bca16b19f94a_JaffaCakes118

DOC_94874893983478992873489302983743048583923.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

25eb7471594388dfa1e1bca16b19f94a_JaffaCakes118

DOC_94874893983478992873489302983743048583923.exe

mscoree

dotnet