2f01c54366dbde85fc59378529975f70_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2f01c54366dbde85fc59378529975f70_JaffaCakes118
Size 323KB
Sample240510-n7txvage76
SHA256 5063eb6114da6d82599fd2b0774e936908e80e2ab5525d3698f9e5712e408abe
MD5 2f01c54366dbde85fc59378529975f70
SHA1 210bac4ca082847a3fec2c7d5eb80d3766e04d32
SHA512 1f4ecc8fa168c164b1d15dbcb3cd9619ad9f05f4870c17af139734c5fd54dd82bfa7a1c279c72075e38098376f162bab42431658a1d037d0716bf53d11688a84
SSDEEP 6144:2/8sXFb2QA9GoReyTU5fYp0ZgCDaCW/YfZav/xkmKt6Fgq+:SLd2k5ipUaCWkEKF66q+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ool.exe

File Explorer

2f01c54366dbde85fc59378529975f70_JaffaCakes118

.gz 323KB
ool.exe

.exe 595KB

2f01c54366dbde85fc59378529975f70_JaffaCakes118

SHA256 5063eb6114da6d82599fd2b0774e936908e80e2ab5525d3698f9e5712e408abe
MD5 2f01c54366dbde85fc59378529975f70
SHA1 210bac4ca082847a3fec2c7d5eb80d3766e04d32
SHA512 1f4ecc8fa168c164b1d15dbcb3cd9619ad9f05f4870c17af139734c5fd54dd82bfa7a1c279c72075e38098376f162bab42431658a1d037d0716bf53d11688a84
SSDEEP 6144:2/8sXFb2QA9GoReyTU5fYp0ZgCDaCW/YfZav/xkmKt6Fgq+:SLd2k5ipUaCWkEKF66q+
MD5 SHA1 SHA512 SSDEEP

ool.exe

SHA256 0863c38d844a42375b3057d52bc75e6d67a3aa202bd5b5e14079929147c68b89
MD5 eae27f51ef241df09461644766f7c8ab
SHA1 17ad552fbc80a2cdeefcc11e5146c4945b73cede
SHA512 2b85b5f0729b229155e2b2d6f7184989a36fa2f81e56b16d3c44d00dae613fa13394560e35ac16d403c01dc03a0f306650b1fd46a33cad66f054ace2351adaff
SSDEEP 12288:7Y2SRgOu9uO2dm4rqoXa3p1m+c9JZUqGWbs:7xSJvObTV37m98qGWI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

351704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

340KB

Virtual Size

339KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

132KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2f01c54366dbde85fc59378529975f70_JaffaCakes118

ool.exe

generic