2b6f1f94d3ffe7aa888dde66bb9de6d6_JaffaCakes118

General

Target
2b6f1f94d3ffe7aa888dde66bb9de6d6_JaffaCakes118
Size 425KB
Sample240509-xpzvtada78
SHA256 08dbeeafc24caff893a3e60e59401e04cbb5408dc86177caf8be9d4c94a93965
MD5 2b6f1f94d3ffe7aa888dde66bb9de6d6
SHA1 619ca87f3fcc9c72f43e22e0a9ff6b4859ae13b5
SHA512 a6c7edb6bc90278c461ff31cc26cbeb775f0b5549edb89339e2baa94ab9ef6eba456c28f2d272d4e0b5b4b51372883180b85f52ef5c16ea57061835846573436
SSDEEP 12288:rgnS1IweViPLQjDUEnGHTi+QwXmJ/XRL7dJcjg:Ly+LaATcgU/3Jp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO181219.exe

File Explorer

2b6f1f94d3ffe7aa888dde66bb9de6d6_JaffaCakes118

.zip 425KB
PO181219.exe

.exe 466KB

2b6f1f94d3ffe7aa888dde66bb9de6d6_JaffaCakes118

SHA256 08dbeeafc24caff893a3e60e59401e04cbb5408dc86177caf8be9d4c94a93965
MD5 2b6f1f94d3ffe7aa888dde66bb9de6d6
SHA1 619ca87f3fcc9c72f43e22e0a9ff6b4859ae13b5
SHA512 a6c7edb6bc90278c461ff31cc26cbeb775f0b5549edb89339e2baa94ab9ef6eba456c28f2d272d4e0b5b4b51372883180b85f52ef5c16ea57061835846573436
SSDEEP 12288:rgnS1IweViPLQjDUEnGHTi+QwXmJ/XRL7dJcjg:Ly+LaATcgU/3Jp
MD5 SHA1 SHA512 SSDEEP

PO181219.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4cf3f2e4957d449f51f1a5dd6b20765aa7a1fe89231f1ea3748cd0c0e90d74c4
MD5 9f1c4ea29a9490e84c85ee622ebbee83
SHA1 03eb6bec9ca71f61726134e031ef1c96609c6fbf
SHA512 2eccd244877aae74692294905fa6d11e7b1d67d03c44147f59dddf1b6d6ffe849529bf1e0ccd1b142d5767c281e229053d6d5d513bcc3c0ec9b428a735ed5f97
SSDEEP 12288:jGNJ561IweViPtQjDMEnSHTigQWX+T/XRfoxwo4P:jGGy+t8kTEOY/4wo4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

507914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

2b6f1f94d3ffe7aa888dde66bb9de6d6_JaffaCakes118

PO181219.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

2b6f1f94d3ffe7aa888dde66bb9de6d6_JaffaCakes118

PO181219.exe

mscoree

dotnet