69be15bce31ea269d5e7d29e7955c8c9_JaffaCakes118

General

Target
69be15bce31ea269d5e7d29e7955c8c9_JaffaCakes118
Size 286KB
Sample240523-e9qtjaea7t
SHA256 5218e441332d1797b3cb0cb5bc19690e74f6f36e3dd6f7cbc19bec2aef488925
MD5 69be15bce31ea269d5e7d29e7955c8c9
SHA1 97867470bdc0e963b72c71429364b6d658b67e2f
SHA512 85e7b185f6eb2a9461dff17f2fd090eddfffccece52aead7475cbeb4a2144aa2ad238badaf4894f80c3e4cdc2562602077073efd523b1053cf4d633d88e00e96
SSDEEP 6144:Ru+pQZCT+j2SEfYaHGXips0AbjHAEZM62m9L5ipFyu:RhQZCscYSGEsrYNmt59u
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BALANCE_PAYMENT.exe

File Explorer

69be15bce31ea269d5e7d29e7955c8c9_JaffaCakes118

.rar 286KB
BALANCE_PAYMENT.exe

.exe 311KB

69be15bce31ea269d5e7d29e7955c8c9_JaffaCakes118

SHA256 5218e441332d1797b3cb0cb5bc19690e74f6f36e3dd6f7cbc19bec2aef488925
MD5 69be15bce31ea269d5e7d29e7955c8c9
SHA1 97867470bdc0e963b72c71429364b6d658b67e2f
SHA512 85e7b185f6eb2a9461dff17f2fd090eddfffccece52aead7475cbeb4a2144aa2ad238badaf4894f80c3e4cdc2562602077073efd523b1053cf4d633d88e00e96
SSDEEP 6144:Ru+pQZCT+j2SEfYaHGXips0AbjHAEZM62m9L5ipFyu:RhQZCscYSGEsrYNmt59u
MD5 SHA1 SHA512 SSDEEP

BALANCE_PAYMENT.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e0cbcef35186de417efe0e7aecb1d88073526260fca7b05b37160ebac37ba5b0
MD5 7259e551f0ca61ec0ccd8b2f9498f135
SHA1 9556302be792b619ffc4744ffcddf222f17a4308
SHA512 f37742e94f5a89e2a1b4e6dec78837011df7dd59d84d03bfae598b05aaadd9f7e5c8aca4f0803b41fa559546120154e716e622768e0eea78908eaa2903351aea
SSDEEP 6144:Yi4CZ4UZR6B39OxyifTuJ2T7RLQWOdfzvLrU+3zoDJESoxpGTYa:Yi4CZVZR43cIwQ2T6lg+AOSIAT1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

323618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

69be15bce31ea269d5e7d29e7955c8c9_JaffaCakes118

BALANCE_PAYMENT.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

69be15bce31ea269d5e7d29e7955c8c9_JaffaCakes118

BALANCE_PAYMENT.exe

mscoree

dotnet