a36afa6570d588807b52558f3a835481_JaffaCakes118

Reason

config extraction: Emotet: pe: invalid address

General

Target
a36afa6570d588807b52558f3a835481_JaffaCakes118
Size 65KB
Sample240613-b5636stcpk
SHA256 2ec31ad61b342762b044415d69bf42727c985e38436fdfd0d09f9e805cdf9ac8
MD5 a36afa6570d588807b52558f3a835481
SHA1 ca4ad0462130f697759fd08f458660ae55c212d3
SHA512 7e9a5518c9aec8754a399951f22429c081e20bca4583554e9e90aef00ffeb758d973e38f1bd962f019c2d449b1c201584c34a3235052a58dc268e11caef3f0ed
SSDEEP 1536:nEi0p6Xn7cUvSkZskkYmIGLv1vaGYLYnv7pzCrcWhf8JrqzzS:EwYUqk+nvaGYo7pu38
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a36afa6570d588807b52558f3a835481_JaffaCakes118

IMPHASH 009889c73bd2e55113bf6dfa5f395e0d
SHA256 2ec31ad61b342762b044415d69bf42727c985e38436fdfd0d09f9e805cdf9ac8
MD5 a36afa6570d588807b52558f3a835481
SHA1 ca4ad0462130f697759fd08f458660ae55c212d3
SHA512 7e9a5518c9aec8754a399951f22429c081e20bca4583554e9e90aef00ffeb758d973e38f1bd962f019c2d449b1c201584c34a3235052a58dc268e11caef3f0ed
SSDEEP 1536:nEi0p6Xn7cUvSkZskkYmIGLv1vaGYLYnv7pzCrcWhf8JrqzzS:EwYUqk+nvaGYo7pu38
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

6

Entry point

55818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths