97f67165e987f3e30e6237959ac4dec4_JaffaCakes118

General

Target
97f67165e987f3e30e6237959ac4dec4_JaffaCakes118
Size 785KB
Sample240605-m9ckxaef57
SHA256 8958c670d4cab09e4ac54be6bb74eba4f47ec0df13819e079a45170b1cc50b1f
MD5 97f67165e987f3e30e6237959ac4dec4
SHA1 ae5101ea3a45bfd2dfb59e1b5a66fee0da70b43f
SHA512 a3b2c3f15cfb82fc9569149deb491f4c4d9867e6f9f1b9cc7db5e83c95b2bbad1b0e84d430b8c74df4c2c003b6de5d89ac1ddf45bd0db64f8fdac32b68bce07d
SSDEEP 12288:x9d2tGBJmJT6xENslj4dMTE0qXgtGBFmJvkR4rMhj41MB7Xh:xDDBJxxEQcMTE0qXdBFbR4mEMB7Xh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT.....exe

File Explorer

97f67165e987f3e30e6237959ac4dec4_JaffaCakes118

.zip 785KB
PAYMENT.....exe

.exe 921KB

97f67165e987f3e30e6237959ac4dec4_JaffaCakes118

SHA256 8958c670d4cab09e4ac54be6bb74eba4f47ec0df13819e079a45170b1cc50b1f
MD5 97f67165e987f3e30e6237959ac4dec4
SHA1 ae5101ea3a45bfd2dfb59e1b5a66fee0da70b43f
SHA512 a3b2c3f15cfb82fc9569149deb491f4c4d9867e6f9f1b9cc7db5e83c95b2bbad1b0e84d430b8c74df4c2c003b6de5d89ac1ddf45bd0db64f8fdac32b68bce07d
SSDEEP 12288:x9d2tGBJmJT6xENslj4dMTE0qXgtGBFmJvkR4rMhj41MB7Xh:xDDBJxxEQcMTE0qXdBFbR4mEMB7Xh
MD5 SHA1 SHA512 SSDEEP

PAYMENT.....exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b9ef185d3f879ecb2a755aef91f48ac6de736185c1f16693afe21dabc70240b9
MD5 7b2bf102c84c32f698c158cdf1bc94be
SHA1 aaebeb07860fd8747184dce60ae40e96303b5615
SHA512 0980eb5a9b9e8e5c85321964874a025699755b4f2676151bfaadcf01a8c5fc287bbbd3223f2a792e09d7d3de5117d66cad71bb3872c29cacbfac8b1c93e2b683
SSDEEP 12288:DfZltGBRmJrQ5il8ljw1MP1xxgZltGBRmJrQ5il8ljw1MP1xx1k+0:bZ2BRL5i2CMPOZ2BRL5i2CMPQ+0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

948590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

97f67165e987f3e30e6237959ac4dec4_JaffaCakes118

PAYMENT.....exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

97f67165e987f3e30e6237959ac4dec4_JaffaCakes118

PAYMENT.....exe

mscoree

dotnet