9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118

General

Target
9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118
Size 671KB
Sample240611-d97avatemk
SHA256 c3727dff978310eecbe3db8dbfe1e478f88827d8410a1659cf9678569c0722f0
MD5 9ce1bec16b71d9025ac887cc2a43dc98
SHA1 d3019fe70b98359289959eef73365fcae82fe6ba
SHA512 247e0ca7cda83c9a4359899262208a568b883efec04ca7cdf409d68a28c8b2e4a767f39822db0b07d32e01e08e1ec25cf567fb0717aeebe46d917d004ff0a2ed
SSDEEP 12288:cSEh3sUxCppggVD/vLx2Nn/DGQh3tbJwU3AkZwtEO2Btghuajn4OpTH6aj:cS+qpplBbx2pDGktFh3XwKwxjZl/j
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW_TRANSFER_POLICY.exe

File Explorer

9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118

.zip 671KB
NEW_TRANSFER_POLICY.exe

.exe 727KB

9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118

SHA256 c3727dff978310eecbe3db8dbfe1e478f88827d8410a1659cf9678569c0722f0
MD5 9ce1bec16b71d9025ac887cc2a43dc98
SHA1 d3019fe70b98359289959eef73365fcae82fe6ba
SHA512 247e0ca7cda83c9a4359899262208a568b883efec04ca7cdf409d68a28c8b2e4a767f39822db0b07d32e01e08e1ec25cf567fb0717aeebe46d917d004ff0a2ed
SSDEEP 12288:cSEh3sUxCppggVD/vLx2Nn/DGQh3tbJwU3AkZwtEO2Btghuajn4OpTH6aj:cS+qpplBbx2pDGktFh3XwKwxjZl/j
MD5 SHA1 SHA512 SSDEEP

NEW_TRANSFER_POLICY.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 46e60512755fdc8319ba4ad65c930837fb67f04bffef2a7ed666299d9bbbbc7a
MD5 a56995ae31324b33e1090857aa42af1b
SHA1 78f8d9c527f04102d782bcfe00b58ad4d6716653
SHA512 1f59386f382fda5e46e1aecd2be11231085ebf88ec6cfaffd7ab2e428a6b4040e85e2228b4f48c9a2bbe3eafb3158ce3fbb514dde555d16cf92a3e6f6a438b71
SSDEEP 12288:kK7x1L5giv5sYAGRcHA3mhkFX2bpbQab/Q62jHSnGmD/nv:k+z6a55KHA3XFabInSFb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

734750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118

NEW_TRANSFER_POLICY.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118

NEW_TRANSFER_POLICY.exe

mscoree

dotnet