94a1403867d3bd6f78515a7be79dc5a6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
94a1403867d3bd6f78515a7be79dc5a6_JaffaCakes118
Size 502KB
Sample240604-ncw4qaeg68
SHA256 b8edce17c289f81e32a4b7f0e60adcbb4a9580ac5570382feab088a0655597dd
MD5 94a1403867d3bd6f78515a7be79dc5a6
SHA1 562625fa89c7cd91e7a325a9755c3b6b86ed3b82
SHA512 ca9260ca5fe1d74cac615314a2a8c6f001a2cf6deb9b6b42f5b8922192a7161ae030b4a633eacf52e0d86d8d069b75abf9895a4bf416cd95c6796af436a887c8
SSDEEP 12288:DPVzp6xXaMqPT9I0zXsEhay7ndpFzMnCAPyrgB2bGJByQr:DlMrqPpPLhay7naCAPyrg2GbPr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase order list.exe

File Explorer

94a1403867d3bd6f78515a7be79dc5a6_JaffaCakes118

.zip 502KB
Purchase order list.exe

.exe 1017KB

94a1403867d3bd6f78515a7be79dc5a6_JaffaCakes118

SHA256 b8edce17c289f81e32a4b7f0e60adcbb4a9580ac5570382feab088a0655597dd
MD5 94a1403867d3bd6f78515a7be79dc5a6
SHA1 562625fa89c7cd91e7a325a9755c3b6b86ed3b82
SHA512 ca9260ca5fe1d74cac615314a2a8c6f001a2cf6deb9b6b42f5b8922192a7161ae030b4a633eacf52e0d86d8d069b75abf9895a4bf416cd95c6796af436a887c8
SSDEEP 12288:DPVzp6xXaMqPT9I0zXsEhay7ndpFzMnCAPyrgB2bGJByQr:DlMrqPpPLhay7naCAPyrg2GbPr
MD5 SHA1 SHA512 SSDEEP

Purchase order list.exe

SHA256 da63e8bb36574c655d7d306574afbc4a67396b12cf8553b1149e0ac8560dc313
MD5 18dd5c3906f514d194b4e00e338e2a44
SHA1 2dfc0be7d26bce4bbd6dd3a930e3664e76de9ce7
SHA512 e7c0a61ca5256bd9a27ef3f1518904751707f675ed3c1374d42e75cbf708eed49428154aac8b98609b3fc01fe4e7f0fe3dd0353319120cd3a19354886461ee75
SSDEEP 12288:nLmPCfh8bqyp4hVV8E2KnYJuhEFNznsjgieOVEjvSnyDnAtrlktQB2eBoc:nLpfNN8EeHTzbnLmxlkWB2M
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

591396

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

574KB

Virtual Size

573KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

64B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

342KB

Virtual Size

341KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

94a1403867d3bd6f78515a7be79dc5a6_JaffaCakes118

Purchase order list.exe

generic