6a65c3a66cc3168ae6187ea6a1ab5d43_JaffaCakes118

General

Target
6a65c3a66cc3168ae6187ea6a1ab5d43_JaffaCakes118
Size 320KB
Sample240523-ksmcnsbc74
SHA256 4f03705e248f307c693af5a0a560d435c0590144c280e7df962d97adbf0d6416
MD5 6a65c3a66cc3168ae6187ea6a1ab5d43
SHA1 a4abe68aec6ff1ec1a5e31551284c9365fbc0bbe
SHA512 5b81d8f324ecf89357d6b6863d5b1aa79ee2cc1ca14329e8e71a1a9137cc447652e29c904da0e024ff554df1cc91f2ac8e26ada304a2d68d026ac15964f1ea85
SSDEEP 6144:FmsuMp/+Nu3Q6e73qE9TMp5pQPNbwLzJWj:FZfpaube7vTC5aGWj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a65c3a66cc3168ae6187ea6a1ab5d43_JaffaCakes118

File Explorer

6a65c3a66cc3168ae6187ea6a1ab5d43_JaffaCakes118

.exe 320KB

6a65c3a66cc3168ae6187ea6a1ab5d43_JaffaCakes118

IMPHASH 6dfb604fb9424b3e3852dd01ab516242
SHA256 4f03705e248f307c693af5a0a560d435c0590144c280e7df962d97adbf0d6416
MD5 6a65c3a66cc3168ae6187ea6a1ab5d43
SHA1 a4abe68aec6ff1ec1a5e31551284c9365fbc0bbe
SHA512 5b81d8f324ecf89357d6b6863d5b1aa79ee2cc1ca14329e8e71a1a9137cc447652e29c904da0e024ff554df1cc91f2ac8e26ada304a2d68d026ac15964f1ea85
SSDEEP 6144:FmsuMp/+Nu3Q6e73qE9TMp5pQPNbwLzJWj:FZfpaube7vTC5aGWj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

56803

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

100KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

116KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

76KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

6a65c3a66cc3168ae6187ea6a1ab5d43_JaffaCakes118

user32

comdlg32

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

6a65c3a66cc3168ae6187ea6a1ab5d43_JaffaCakes118

user32

comdlg32

kernel32

generic