6f3d8e69382cd63205b00eeccfd7b839_JaffaCakes118

General

Target
6f3d8e69382cd63205b00eeccfd7b839_JaffaCakes118
Size 390KB
Sample240524-vrlpvsdd65
SHA256 c7f39ffbd4188672e93a467304577000e255f966d2091f4806670af666c115d1
MD5 6f3d8e69382cd63205b00eeccfd7b839
SHA1 11308a10ba3c89fe09565bd21a944f0c68422536
SHA512 19b0bccb5c34004cca30c0c2fa5094919938ae1822f3a28a1e9d7f7279c51add0ed442044959677deae5755e52f566ff49f6cae2ab599a84a0deee6e2971e7f1
SSDEEP 6144:LV9uiLsgC1q8zwjuWyv1Gsi49ach+yKRS0RhfoWkN8fQ1sTxlknLpbNNdTKhoP:LfsrzDMs99a3nhgWs/sxlknLpJ6CP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/10-2.exe

File Explorer

6f3d8e69382cd63205b00eeccfd7b839_JaffaCakes118

.eml 390KB
10-2.zip

.zip 285KB
10-2.exe

.exe 404KB
email-plain-1.txt

12B

6f3d8e69382cd63205b00eeccfd7b839_JaffaCakes118

SHA256 c7f39ffbd4188672e93a467304577000e255f966d2091f4806670af666c115d1
MD5 6f3d8e69382cd63205b00eeccfd7b839
SHA1 11308a10ba3c89fe09565bd21a944f0c68422536
SHA512 19b0bccb5c34004cca30c0c2fa5094919938ae1822f3a28a1e9d7f7279c51add0ed442044959677deae5755e52f566ff49f6cae2ab599a84a0deee6e2971e7f1
SSDEEP 6144:LV9uiLsgC1q8zwjuWyv1Gsi49ach+yKRS0RhfoWkN8fQ1sTxlknLpbNNdTKhoP:LfsrzDMs99a3nhgWs/sxlknLpJ6CP
MD5 SHA1 SHA512 SSDEEP

10-2.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2d8af025841b523076a35926b94baa786ffbcb5dcf873796ca30bc41f892a867
MD5 54cce75f58836bcdaf4dd29dbe7312ee
SHA1 cdbb64c652e2033fc3f17297fcfb3af0689503cf
SHA512 5162f24bdefc7cb915caf51c930672cb3d2a67725c81a1b0e62c51895aabdc8ea53d01a512fdeeaaba7d20281a7a2bbfa14ee3e2379c06687417340adc816e34
SSDEEP 12288:ggD4fqRBdy4r3XyMb6U0tppCGfksVGB6dbQW+M2WUKn:gAfdNXPmKvjYdbd+M
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

419646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

6f3d8e69382cd63205b00eeccfd7b839_JaffaCakes118

10-2.zip

10-2.exe

mscoree

dotnet

email-plain-1.txt

Sharing

General

Malware Config

Signatures

File Explorer

6f3d8e69382cd63205b00eeccfd7b839_JaffaCakes118

10-2.zip

10-2.exe

mscoree

dotnet

email-plain-1.txt