Overview

overview

10

Static

static

3

73578dbfce...18.exe

windows7-x64

3

73578dbfce...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    73578dbfcec0b67c49f7d53f6c7230e9_JaffaCakes118
  • Size 178KB
  • Sample240525-1llessca75
  • SHA256 1b2a9fa6e6890199bb70dce2035d8f599f2af4505bef8e05def2954f6a5ce376
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 73578dbfcec0b67c49f7d53f6c7230e9_JaffaCakes118
    .exe 178KB

73578dbfcec0b67c49f7d53f6c7230e9_JaffaCakes118

  • IMPHASH 1f2b2eca60f205575e2f03c848d6515b
  • SHA256 1b2a9fa6e6890199bb70dce2035d8f599f2af4505bef8e05def2954f6a5ce376
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx86arch:x86

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
5141
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\wclee\documents\visual studio 2015\Projects\AVbypass\Release\AVbypass.pdb