8eb5ceeef624853ae4b5d3bf808f36b8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8eb5ceeef624853ae4b5d3bf808f36b8_JaffaCakes118
Size 359KB
Sample240602-tybmssge8v
SHA256 0176dba2e816339b3a7b237f51a8bb59837d588f29f0b5700d0826dd0c3c4310
MD5 8eb5ceeef624853ae4b5d3bf808f36b8
SHA1 9f72c48ed97d0cb875578d197bbe35b37ca1ff2d
SHA512 2c84bc61d0b4e9b13f95f1fa8ed9a422d50eb1b0da683221bebfff8306a1a0b47b8013362b13a87e543c9896ef7e2192d7c94f34e6a3aaacd3bfcb3a9fb5ca74
SSDEEP 6144:vW+4Xsq3KCItawmV/JRQ9J5bXx5hM3dPx4wQjaLMa1+z/XbFTM+HJXpfc:++wsq3KQorVXdyPanjaL+zfhMopfc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

8eb5ceeef624853ae4b5d3bf808f36b8_JaffaCakes118

.exe 359KB

8eb5ceeef624853ae4b5d3bf808f36b8_JaffaCakes118

IMPHASH 4f74d10010d05f52616c44ef43b37414
SHA256 0176dba2e816339b3a7b237f51a8bb59837d588f29f0b5700d0826dd0c3c4310
MD5 8eb5ceeef624853ae4b5d3bf808f36b8
SHA1 9f72c48ed97d0cb875578d197bbe35b37ca1ff2d
SHA512 2c84bc61d0b4e9b13f95f1fa8ed9a422d50eb1b0da683221bebfff8306a1a0b47b8013362b13a87e543c9896ef7e2192d7c94f34e6a3aaacd3bfcb3a9fb5ca74
SSDEEP 6144:vW+4Xsq3KCItawmV/JRQ9J5bXx5hM3dPx4wQjaLMa1+z/XbFTM+HJXpfc:++wsq3KQorVXdyPanjaL+zfhMopfc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

28:1a:60:ec:8b:2a:da:83:e6:04:33:ec:c8:e4:f2:2e:ec:1b:18:7c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Daniel Hareuveni,O=Daniel Hareuveni,POSTALCODE=6958301,STREET=Yair Rozenblum 15,L=Tel aviv,ST=Israel,C=IL

Chains

May 23, 2024

Minor OS version

Major OS version

Entry point

31996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data3

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

8eb5ceeef624853ae4b5d3bf808f36b8_JaffaCakes118

PE Signature issue

kernel32

generic