a3d061d931f295c0f4ff909648eabca4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a3d061d931f295c0f4ff909648eabca4_JaffaCakes118
Size 286KB
Sample240613-e1yssaxfrm
SHA256 88cc9ad9d0c9fcb63a0a127c854aff5bb91169caa9c28935b76676d3028f3a49
MD5 a3d061d931f295c0f4ff909648eabca4
SHA1 9a499dcf0703bac84dc5b8319e7bf45bed5ed4b7
SHA512 a20863149a1e507b2e7f8abfc7829668b05c4f08c1de57e9c7ce4d561ebffafbcc93564d0f9fc3a5b96fe90b99c1ff0cad785aaa2246f88183468858c5df18b2
SSDEEP 6144:zOEVxxeqeS2GQqlS5RkmvC7cIra2RIP2iljzCKfD67jkT6IV9Q5Hfao0b:aEgtPT5RfZ0+9QUWXcTUCd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NRTrainer_fx4.exe

File Explorer

a3d061d931f295c0f4ff909648eabca4_JaffaCakes118

.rar 286KB
NRTrainer_fx4.exe

.exe 705KB

a3d061d931f295c0f4ff909648eabca4_JaffaCakes118

SHA256 88cc9ad9d0c9fcb63a0a127c854aff5bb91169caa9c28935b76676d3028f3a49
MD5 a3d061d931f295c0f4ff909648eabca4
SHA1 9a499dcf0703bac84dc5b8319e7bf45bed5ed4b7
SHA512 a20863149a1e507b2e7f8abfc7829668b05c4f08c1de57e9c7ce4d561ebffafbcc93564d0f9fc3a5b96fe90b99c1ff0cad785aaa2246f88183468858c5df18b2
SSDEEP 6144:zOEVxxeqeS2GQqlS5RkmvC7cIra2RIP2iljzCKfD67jkT6IV9Q5Hfao0b:aEgtPT5RfZ0+9QUWXcTUCd
MD5 SHA1 SHA512 SSDEEP

NRTrainer_fx4.exe

SHA256 8edcf502271a8ee613383fba89ed1b08a39dea5593ae48cd4d3f860ebcb6c9f7
MD5 6a56b77d199066ed73315ac60953cf6d
SHA1 d3944d155197682970a250d55eed6d1bc607486c
SHA512 9485c96f52a5e322b320b56e1d538f34293c5e2c4a78787a9d60f7a4cf56f616a7f0ce7d680804c758d5479b98c30a27a6905b1281cdf640a0fd431e05079ce2
SSDEEP 12288:9EDCJJDXb8qWvvMyesvleMkWzChpBTfgYvVtcgwSuLnKtTs:9mQGbvNvjkJPKuMlXp
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

605116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

587KB

Virtual Size

587KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a3d061d931f295c0f4ff909648eabca4_JaffaCakes118

NRTrainer_fx4.exe

generic