General

  • Target
    a100640e28020c6704cac0c103c5669f_JaffaCakes118
  • Size 840KB
  • Sample240612-rwewbssbql
  • SHA256 15e1d52d39dd59eb76d7baf45ab7b430c8f807ab5d5a6757757cd45075a00429
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • a100640e28020c6704cac0c103c5669f_JaffaCakes118
    .dll 840KB

a100640e28020c6704cac0c103c5669f_JaffaCakes118

  • IMPHASH dae02f32a21e03ce65412f6e56942daa
  • SHA256 15e1d52d39dd59eb76d7baf45ab7b430c8f807ab5d5a6757757cd45075a00429
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
fb:09:92:f3:96:8d:8b:b8:ae:9e:4c:b5:7b:8c:91:e3:f8:a6:1b:1d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Follow Rules,O=Follow Rules,L=San Diego,ST=California,C=US
Chains

Jul 9, 2015

Minor OS version
0
Major OS version
4
Entry point
860158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths