926ab9b3d12865dc70991a66ea586988_JaffaCakes118

General

Target
926ab9b3d12865dc70991a66ea586988_JaffaCakes118
Size 210KB
Sample240603-tr1ncacb2w
SHA256 239db43f3e79de43839a4bfb65a5fd54c7a4a7499efa4030cac02877dceb3c1a
MD5 926ab9b3d12865dc70991a66ea586988
SHA1 b9a52f1c50f18e258f6261dbf89e9b35dd0ac0d5
SHA512 0251acd75c519ec311ab0b75c58ca94df7536f6139018e87f49bfc85b3eb72aa9427cb6d5587d9022f2bcdc4876bcf9c88f0fce71109e689ed86494075c594d5
SSDEEP 3072:NkATHweQv5JxWPZBevj7XAqaILJGX76r8DzyE2RU+H8zW2AsTh0sK:2ATQDU3iAqzLJErARpczrAkh0sK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

926ab9b3d12865dc70991a66ea586988_JaffaCakes118

.exe 210KB

926ab9b3d12865dc70991a66ea586988_JaffaCakes118

IMPHASH 6fb3223b77f6b8ecdb22a326e094cc89
SHA256 239db43f3e79de43839a4bfb65a5fd54c7a4a7499efa4030cac02877dceb3c1a
MD5 926ab9b3d12865dc70991a66ea586988
SHA1 b9a52f1c50f18e258f6261dbf89e9b35dd0ac0d5
SHA512 0251acd75c519ec311ab0b75c58ca94df7536f6139018e87f49bfc85b3eb72aa9427cb6d5587d9022f2bcdc4876bcf9c88f0fce71109e689ed86494075c594d5
SSDEEP 3072:NkATHweQv5JxWPZBevj7XAqaILJGX76r8DzyE2RU+H8zW2AsTh0sK:2ATQDU3iAqzLJErARpczrAkh0sK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

f7:39:e5:05:ee:ea:d0:30:25:21:31:7c:04:94:e0:2e:1a:1f:cd:03

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Anatoly Doronin,O=Anatoly Doronin,C=PL,1.2.840.113549.1.9.1=#0c1c737570706f72744061732d696e7465726e65742d746563682e636f6d

Chains

Jun 3, 2024

Minor OS version

1

Major OS version

5

Entry point

28444

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

926ab9b3d12865dc70991a66ea586988_JaffaCakes118

PE Signature issue

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

926ab9b3d12865dc70991a66ea586988_JaffaCakes118

PE Signature issue

kernel32

generic