527081e5bbbbf663d63c8a949ab08552_JaffaCakes118

General

Target
527081e5bbbbf663d63c8a949ab08552_JaffaCakes118
Size 143KB
Sample240518-br4qwsdd82
SHA256 5b4b1117c661a07ced26879561d3bc8c54f97c16728836c13130d0cd5ad2b430
MD5 527081e5bbbbf663d63c8a949ab08552
SHA1 c967bfb1c0aa0d214dbcd770d420a2192012a5e0
SHA512 ba54bf655f4ba99229f5fefa95d58cbed1e19fdf968893308d3e779046e94fee87264ca40cc065b66c29638b4466c924ef4b576ac8321d982b4eb172387a5d08
SSDEEP 3072:ST0I5ftB1F3Dn6dehwa3xGlTrPwXFdbI5ONFQc:S95hdxGprPwXzU8nr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ran/ransomware.exe

File Explorer

527081e5bbbbf663d63c8a949ab08552_JaffaCakes118

.rar 143KB
ran/ransomware.exe

.exe 184KB

527081e5bbbbf663d63c8a949ab08552_JaffaCakes118

SHA256 5b4b1117c661a07ced26879561d3bc8c54f97c16728836c13130d0cd5ad2b430
MD5 527081e5bbbbf663d63c8a949ab08552
SHA1 c967bfb1c0aa0d214dbcd770d420a2192012a5e0
SHA512 ba54bf655f4ba99229f5fefa95d58cbed1e19fdf968893308d3e779046e94fee87264ca40cc065b66c29638b4466c924ef4b576ac8321d982b4eb172387a5d08
SSDEEP 3072:ST0I5ftB1F3Dn6dehwa3xGlTrPwXFdbI5ONFQc:S95hdxGprPwXzU8nr
MD5 SHA1 SHA512 SSDEEP

ran/ransomware.exe

IMPHASH 65e9607e6f28a7852bb41a6e2e439a92
SHA256 5ae878c07e7420511755ef8e4a32412a4f0f619519b278c0014b56f344ec3427
MD5 803c34801f921a3618eca6791c269cf7
SHA1 e32e74e31846ee423dedd4bd2b00a3c3d93bfaee
SHA512 d0c73020899e782fdf2b50359ac15e9febf49005c4f2d9a123c68ec72b1f6fb2a31e589b3222be4b5b53ed30c4569addf856fb6808d8180e137b64d4c1fd9404
SSDEEP 3072:H/IBtQnE7OhssdWJ5jy392aCmCbBqM2x8XzUr380WFiIU6w4iAPcgxj7DRkF:Kqvhssdu5jyYaCmCQMc8XzUrM0Kiv6Nu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

527081e5bbbbf663d63c8a949ab08552_JaffaCakes118

ran/ransomware.exe

kernel32

user32

advapi32

generic

Sharing

General

Malware Config

Signatures

File Explorer

527081e5bbbbf663d63c8a949ab08552_JaffaCakes118

ran/ransomware.exe

kernel32

user32

advapi32

generic