507d7183c6cac4f710285c3b0df81f25_JaffaCakes118

General

Target
507d7183c6cac4f710285c3b0df81f25_JaffaCakes118
Size 100KB
Sample240517-vbraeahc24
SHA256 b7b278f28e0760b520f5807dc8f33b554955ac2a9566d44bf79818dd70ae388d
MD5 507d7183c6cac4f710285c3b0df81f25
SHA1 9252dba208384876ccd586006667ca805fe08111
SHA512 c259ccf88df6723f219a026356f0d74547a0601fa3dfe3b33a3c676796ee296a2266e2fa38d16b7afcc65792d9fe6ba6d5fb48a0ba109cb46363b50b8328352d
SSDEEP 1536:q3yUlOlIHz9DPd2VqVg7dcSs4x8UkqVclF6shVJzOZjWTq+CifoNZ7tuo65N:NUklITBE7mSJaDCwzO1WGjKq0vr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/okkkkkkkk.exe

File Explorer

507d7183c6cac4f710285c3b0df81f25_JaffaCakes118

.zip 100KB
okkkkkkkk.exe

.exe 120KB

507d7183c6cac4f710285c3b0df81f25_JaffaCakes118

SHA256 b7b278f28e0760b520f5807dc8f33b554955ac2a9566d44bf79818dd70ae388d
MD5 507d7183c6cac4f710285c3b0df81f25
SHA1 9252dba208384876ccd586006667ca805fe08111
SHA512 c259ccf88df6723f219a026356f0d74547a0601fa3dfe3b33a3c676796ee296a2266e2fa38d16b7afcc65792d9fe6ba6d5fb48a0ba109cb46363b50b8328352d
SSDEEP 1536:q3yUlOlIHz9DPd2VqVg7dcSs4x8UkqVclF6shVJzOZjWTq+CifoNZ7tuo65N:NUklITBE7mSJaDCwzO1WGjKq0vr
MD5 SHA1 SHA512 SSDEEP

Password

infected

okkkkkkkk.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a8e4778e5023373038c2214d85fcbdbfe0e5f63ad721bed8def3ab65d1f292cb
MD5 50c2221345a927e9b1f20f49f4e32230
SHA1 8cf858f3776a4d9d4f99aac814f24e646118bf5c
SHA512 c04993299fbfbcd4faefbfdca3753ee7a21db3f6f82448e7eee615349fd8f68d9a60bd0f666f5830a2aff7d3bde5fe0873f7d75f9fb0018fb2f917c469501494
SSDEEP 3072:436hbrS9B+R64paFhoLU56OGt0ClArUhn3NrsM3OA6GKGA:Bbr66leyiy6uhnSM6G1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

117406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

507d7183c6cac4f710285c3b0df81f25_JaffaCakes118

okkkkkkkk.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

507d7183c6cac4f710285c3b0df81f25_JaffaCakes118

okkkkkkkk.exe

mscoree

dotnet