925532a767fea4d078a3863437799ec7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
925532a767fea4d078a3863437799ec7_JaffaCakes118
Size 2.7MB
Sample240603-taaqlacf56
SHA256 5f582b40db5694ac4fa6eb42bce513476dcfea05215d526785b538fc89eff9f7
MD5 925532a767fea4d078a3863437799ec7
SHA1 c6f248389448c8cf29608fc4aa7b646a65ab8e08
SHA512 37a1a0b5ae30138fd3ff8cc8255ef610983b978c6f2e9c4cb18a8d2b09f19e9398052337854a9ecc39ff134c59d8be3627b81fb363d7a92646479c5ab9ef21ec
SSDEEP 49152:b8tGFNpZgtlNPqQ9k6+ABf8Q4RxUQGetdZWYgiJOhbR1CtJk1L:b8OqXqQmKBflcWYg7RC0L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
925532a767fea4d078a3863437799ec7_JaffaCakes118

File Explorer

925532a767fea4d078a3863437799ec7_JaffaCakes118

.exe 2.7MB

925532a767fea4d078a3863437799ec7_JaffaCakes118

IMPHASH 89795a862e03b596fe1403dce4b6aea2
SHA256 5f582b40db5694ac4fa6eb42bce513476dcfea05215d526785b538fc89eff9f7
MD5 925532a767fea4d078a3863437799ec7
SHA1 c6f248389448c8cf29608fc4aa7b646a65ab8e08
SHA512 37a1a0b5ae30138fd3ff8cc8255ef610983b978c6f2e9c4cb18a8d2b09f19e9398052337854a9ecc39ff134c59d8be3627b81fb363d7a92646479c5ab9ef21ec
SSDEEP 49152:b8tGFNpZgtlNPqQ9k6+ABf8Q4RxUQGetdZWYgiJOhbR1CtJk1L:b8OqXqQmKBflcWYg7RC0L
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1302518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

694KB

Virtual Size

693KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

799KB

Virtual Size

799KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

/14

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

/24

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

925532a767fea4d078a3863437799ec7_JaffaCakes118

kernel32

generic