a72faa406c1c7756844712d00445c193_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a72faa406c1c7756844712d00445c193_JaffaCakes118
Size 377KB
Sample240613-3wclrawdqe
SHA256 134d2b61d95b849cfa585e1d6a0b371b1229ff7f8909ac8aba446f855e0afa1e
MD5 a72faa406c1c7756844712d00445c193
SHA1 9ef3406fb5a57a3dd76ae25d383810a618f0cb75
SHA512 bae05a1557a8c927c05bc6a3a3042535db6c539204f17ad5b95ae65af86d5ee3c6e5dd4ded5ef4cf2a6beedd61828e73d3005768cf476a8e219f637f7be49f49
SSDEEP 6144:PcPkfVnnZ2m5qOl2e0smaqXSD7Jk2pxjbQgvlGynF6uG9DurvkrdvolrJH/:UsVnZz0FsCXi7Jk2pxjbQGGynF6u2OMm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a72faa406c1c7756844712d00445c193_JaffaCakes118

.exe 377KB

a72faa406c1c7756844712d00445c193_JaffaCakes118

IMPHASH 4030a75029b01ea76b13a059ea06f6c5
SHA256 134d2b61d95b849cfa585e1d6a0b371b1229ff7f8909ac8aba446f855e0afa1e
MD5 a72faa406c1c7756844712d00445c193
SHA1 9ef3406fb5a57a3dd76ae25d383810a618f0cb75
SHA512 bae05a1557a8c927c05bc6a3a3042535db6c539204f17ad5b95ae65af86d5ee3c6e5dd4ded5ef4cf2a6beedd61828e73d3005768cf476a8e219f637f7be49f49
SSDEEP 6144:PcPkfVnnZ2m5qOl2e0smaqXSD7Jk2pxjbQgvlGynF6uG9DurvkrdvolrJH/:UsVnZz0FsCXi7Jk2pxjbQGGynF6u2OMm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

89:bf:b7:cd:d3:23:f9:86:94:ce:d8:f5:dd:f6:37:43:d9:58:8f:79

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Normands\, LLC,O=Normands\, LLC,L=DNIPROPETROVSK,C=UA,1.2.840.113549.1.9.1=#0c1361646d696e406e6f726d616e64732e696e666f

Chains

Jun 12, 2024

Minor OS version

Major OS version

Entry point

30652

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data3

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

134KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

a72faa406c1c7756844712d00445c193_JaffaCakes118

PE Signature issue

kernel32

generic