731797c96938873c7ed44fdccc2595d5_JaffaCakes118

General

Target
731797c96938873c7ed44fdccc2595d5_JaffaCakes118
Size 540KB
Sample240525-ythb1age6s
SHA256 4ea28d5654139872543b0aa3987e97ddb0a92b977afdd993efbb64b34bc51322
MD5 731797c96938873c7ed44fdccc2595d5
SHA1 3a23b5e285888a383d0036d3a9c557d2b62f9b99
SHA512 93ec9fee6d1d1b89c8bf9c28835431b3c3267938795dd824ab32a303f73054640b5e2d44d57dd1ec284bf14fa614671be290004902e422a0226bd66264e006e9
SSDEEP 12288:8kujl49Q5rb9c8Hz+n3ds1QNUKokN+XpDPCMm3YCZhyVyDqfBq:m4Q5rBA3BUZunMmPZhyYDqQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase order list.JPG.scr

File Explorer

731797c96938873c7ed44fdccc2595d5_JaffaCakes118

.zip 540KB
Purchase order list.JPG.scr

.exe 674KB

731797c96938873c7ed44fdccc2595d5_JaffaCakes118

SHA256 4ea28d5654139872543b0aa3987e97ddb0a92b977afdd993efbb64b34bc51322
MD5 731797c96938873c7ed44fdccc2595d5
SHA1 3a23b5e285888a383d0036d3a9c557d2b62f9b99
SHA512 93ec9fee6d1d1b89c8bf9c28835431b3c3267938795dd824ab32a303f73054640b5e2d44d57dd1ec284bf14fa614671be290004902e422a0226bd66264e006e9
SSDEEP 12288:8kujl49Q5rb9c8Hz+n3ds1QNUKokN+XpDPCMm3YCZhyVyDqfBq:m4Q5rBA3BUZunMmPZhyYDqQ
MD5 SHA1 SHA512 SSDEEP

Purchase order list.JPG.scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1a5f70e81feddef080a6913baa2c46e2098cc0dec52c66a0f6632084d7ba983e
MD5 732666aebcfaa043adcf0435c25c2a63
SHA1 7063a25f0d956ac54fdf83b5842f750c18d214e7
SHA512 0d0eb7aaa8c0033e3e6e84316eb3b095b47cfea00c8e8adcc12525f628966e8de39e891bb6f55de8991536912fe746fd6f27892c4aa0fbacc9842295714dce79
SSDEEP 12288:S5ciWsuCCFz+srS6lBeMS8YOUKaENFgI9ttuZC7vWEY:STMFCO5lmOUKaXINuK2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

623230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

731797c96938873c7ed44fdccc2595d5_JaffaCakes118

Purchase order list.JPG.scr

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

731797c96938873c7ed44fdccc2595d5_JaffaCakes118

Purchase order list.JPG.scr

mscoree

dotnet