384428223e6ecf92b58a2ec4d0ccfb7f_JaffaCakes118

General

Target
384428223e6ecf92b58a2ec4d0ccfb7f_JaffaCakes118
Size 39KB
Sample240512-e4xd5agf4t
SHA256 9132c4e1af0d9d6c53f697c42bf596b219e47959a191ae9a0916fc4f5ee94cb8
MD5 384428223e6ecf92b58a2ec4d0ccfb7f
SHA1 115b1cc7ee3235184f6f552b90558547f1fe6865
SHA512 fdb249723f894388ef9b9f3a7159f1e41e1d24aa8dd238fb30b1e770b3241277958fa632df9e904fe73b84f9d37626ab1a2aa6365476cddbf90dfc23cac1d8f7
SSDEEP 768:ZKpv7AZHqB2AVfjZyOy1PctuEXrAclQav/uuTq1MVFp2iVPr:ZKpT0H3AVsOOctbrAclQHue1UFpfRr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/explorer.exe

File Explorer

384428223e6ecf92b58a2ec4d0ccfb7f_JaffaCakes118

.zip 39KB
explorer.exe

.exe 90KB

384428223e6ecf92b58a2ec4d0ccfb7f_JaffaCakes118

SHA256 9132c4e1af0d9d6c53f697c42bf596b219e47959a191ae9a0916fc4f5ee94cb8
MD5 384428223e6ecf92b58a2ec4d0ccfb7f
SHA1 115b1cc7ee3235184f6f552b90558547f1fe6865
SHA512 fdb249723f894388ef9b9f3a7159f1e41e1d24aa8dd238fb30b1e770b3241277958fa632df9e904fe73b84f9d37626ab1a2aa6365476cddbf90dfc23cac1d8f7
SSDEEP 768:ZKpv7AZHqB2AVfjZyOy1PctuEXrAclQav/uuTq1MVFp2iVPr:ZKpT0H3AVsOOctbrAclQHue1UFpfRr
MD5 SHA1 SHA512 SSDEEP

Password

infected

explorer.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9851d065bfe156e21c4094445283ea8d1b1aae729f677500427454d936b79095
MD5 f4023c2b6440d297c2b691663f4ebc6a
SHA1 b86c6af13acdc2e214add4dfb905010dfbc838df
SHA512 dd67ac761bbfcbaebd44844463fd53d9975c9036dde801dbf7dc67a5960f9514a776afd916d95e6293a09eda4d28d5d54f5c6a4f49513dffbd3004a38f9c40d1
SSDEEP 1536:bnJhacdZmWeGAVF87inEV99MvyNr6Ru6kQZzU3mmcS7:bnfacdZmWerF8enETZ76Xz/mci
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

84734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Pc\Downloads\27-3-2018\PolyRSM rc 4 poly AES\njRAT rc4 +poly RSM +poly AES\WindowsApplication1\WindowsApplication1\obj\x86\Release\explorer.pdb

384428223e6ecf92b58a2ec4d0ccfb7f_JaffaCakes118

explorer.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

384428223e6ecf92b58a2ec4d0ccfb7f_JaffaCakes118

explorer.exe

mscoree

dotnet