General

  • Target
    91f8ab2d1c10ae16706ee3c25cf0558b_JaffaCakes118
  • Size 908KB
  • Sample240603-qvt37ahe87
  • SHA256 a184f2ee20d223067e3816d065972f19ba8e5fe70b3ce4eb88216039c0ca66e2
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

File Explorer

  • 91f8ab2d1c10ae16706ee3c25cf0558b_JaffaCakes118
    .exe 908KB

91f8ab2d1c10ae16706ee3c25cf0558b_JaffaCakes118

  • IMPHASH c5f844dd8f82b6eb605d542b82a73b98
  • SHA256 a184f2ee20d223067e3816d065972f19ba8e5fe70b3ce4eb88216039c0ca66e2
  • MD5 SHA1 SHA512 SSDEEP
  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

PE Signature issue

Digest
26:b9:da:cf:7f:7c:72:2d:42:ad:85:a2:80:66:6a:fd:c0:85:c7:f7
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Datamean Technologies LTD,O=Datamean Technologies LTD,POSTALCODE=7577,STREET=25 Tasou Konstantinou,L=Mazotos,ST=Larnaca,C=CY
Chains

May 23, 2024

Minor OS version
0
Major OS version
4
Entry point
106880
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths