a1d162ef2cf3d0d81ac010e9edc2fd27_JaffaCakes118

General

Target
a1d162ef2cf3d0d81ac010e9edc2fd27_JaffaCakes118
Size 121KB
Sample240612-xe2xeswapc
SHA256 43160b504b44e6441974c3d87889130692db48612782bc4d2cd8e036f4f038d7
MD5 a1d162ef2cf3d0d81ac010e9edc2fd27
SHA1 c56e8d74fbd8c13b50699e2ad3d01ebe81bae0db
SHA512 18d2c81705024b4d2e81eac62c6a1c88baf6843e6f6d52acfa6d535a7d88736d4b0687cd763528c3f7ff1c8450efd208d1eb135a0e4542a1a946c318ee318773
SSDEEP 1536:sfKYh7CroFliXZxVURXgsvouJ1gJcxWGd+oryMm+HcUg4G3Yxs:siiWXVURwsvofOWGd2Mm+HcUg4GD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d162ef2cf3d0d81ac010e9edc2fd27_JaffaCakes118

File Explorer

a1d162ef2cf3d0d81ac010e9edc2fd27_JaffaCakes118

.exe 121KB

a1d162ef2cf3d0d81ac010e9edc2fd27_JaffaCakes118

SHA256 43160b504b44e6441974c3d87889130692db48612782bc4d2cd8e036f4f038d7
MD5 a1d162ef2cf3d0d81ac010e9edc2fd27
SHA1 c56e8d74fbd8c13b50699e2ad3d01ebe81bae0db
SHA512 18d2c81705024b4d2e81eac62c6a1c88baf6843e6f6d52acfa6d535a7d88736d4b0687cd763528c3f7ff1c8450efd208d1eb135a0e4542a1a946c318ee318773
SSDEEP 1536:sfKYh7CroFliXZxVURXgsvouJ1gJcxWGd+oryMm+HcUg4G3Yxs:siiWXVURwsvofOWGd2Mm+HcUg4GD
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

a1d162ef2cf3d0d81ac010e9edc2fd27_JaffaCakes118

generic