93e05658fb9f980be5368350c76e49de_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
93e05658fb9f980be5368350c76e49de_JaffaCakes118
Size 136KB
Sample240604-hak1sagb8y
SHA256 44d998a01bb00b8b67002d8da48a4ace96df8f1333325bc9dec6bd79084c546d
MD5 93e05658fb9f980be5368350c76e49de
SHA1 1f24cde761142515b1047ca3e1802958c6aff64e
SHA512 b6de5e65e0c11cdfa01585d2e9f2b260ad063cc053c62ba817c0ac3e86caacaab9c08ce433dd976433a67e687d5d8b968125ca9c1fa3c29b3d6e889ac37f6e64
SSDEEP 1536:HJW3rbH+yZpPbxy8zwmO/7UaUMs/o45SbWPqcYOXzFGmvlhj4O+LCY1NG7qDgjH:HJWHpdy8PO/gF/odqPjXzFB4O+CFIgT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93e05658fb9f980be5368350c76e49de_JaffaCakes118

File Explorer

93e05658fb9f980be5368350c76e49de_JaffaCakes118

.exe 136KB

93e05658fb9f980be5368350c76e49de_JaffaCakes118

IMPHASH 5a71d165e2ee6ce78eb662964c7a4e71
SHA256 44d998a01bb00b8b67002d8da48a4ace96df8f1333325bc9dec6bd79084c546d
MD5 93e05658fb9f980be5368350c76e49de
SHA1 1f24cde761142515b1047ca3e1802958c6aff64e
SHA512 b6de5e65e0c11cdfa01585d2e9f2b260ad063cc053c62ba817c0ac3e86caacaab9c08ce433dd976433a67e687d5d8b968125ca9c1fa3c29b3d6e889ac37f6e64
SSDEEP 1536:HJW3rbH+yZpPbxy8zwmO/7UaUMs/o45SbWPqcYOXzFGmvlhj4O+LCY1NG7qDgjH:HJWHpdy8PO/gF/odqPjXzFB4O+CFIgT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17648

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.yb

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

CODE

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

48KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

93e05658fb9f980be5368350c76e49de_JaffaCakes118

comctl32

wintrust

gdi32

ws2_32

shlwapi

winscard

advapi32

user32

msacm32

kernel32

comdlg32

crypt32

setupapi

generic