a41bb50dd1b9cd3bb9bfb5dfda6fef60_JaffaCakes118

General

Target
a41bb50dd1b9cd3bb9bfb5dfda6fef60_JaffaCakes118
Size 440KB
Sample240613-gr2t7a1arj
SHA256 dc892eb46f462aa6dda9d3635ad35a6a67828fc442ca22c1f33587e2d0b58c3e
MD5 a41bb50dd1b9cd3bb9bfb5dfda6fef60
SHA1 0785012d770d2c51613a543ca4bc9a47e9bb0644
SHA512 f810c597b2579a429a0ed18f6d5a49295699addcbe9a9f2340075f3d5da0274540e5d7163417e72d0d3f5584c73ba74be132ca68e8672adbadb57bfea6185fb6
SSDEEP 12288:mE7Q+wUGZ41MAp06mYDcSnvzyZRlo2hEjecJu:mGQ+wGp06ng6zymyE7Ju
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/scandocuments2020.exe

File Explorer

a41bb50dd1b9cd3bb9bfb5dfda6fef60_JaffaCakes118

.zip 440KB
scandocuments2020.exe

.exe 554KB

a41bb50dd1b9cd3bb9bfb5dfda6fef60_JaffaCakes118

SHA256 dc892eb46f462aa6dda9d3635ad35a6a67828fc442ca22c1f33587e2d0b58c3e
MD5 a41bb50dd1b9cd3bb9bfb5dfda6fef60
SHA1 0785012d770d2c51613a543ca4bc9a47e9bb0644
SHA512 f810c597b2579a429a0ed18f6d5a49295699addcbe9a9f2340075f3d5da0274540e5d7163417e72d0d3f5584c73ba74be132ca68e8672adbadb57bfea6185fb6
SSDEEP 12288:mE7Q+wUGZ41MAp06mYDcSnvzyZRlo2hEjecJu:mGQ+wGp06ng6zymyE7Ju
MD5 SHA1 SHA512 SSDEEP

scandocuments2020.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7301fa4edc89a5bd4a18479ebf5b88460ee35b4631e147a8754866a58bcae873
MD5 79caee8598106c6832ed5388cb8cad01
SHA1 cb0f550fb6fe0bb03c4b80a3f6ebc09945355f7f
SHA512 e0951e9ab07eb72913659336fbe28b291dafcdd0e9273a3630e3b736281e95287b26b731eecb2587bc422ce119845b0416a2be79437b026156fd09f1da5035e6
SSDEEP 12288:tOvo0mM00ev2zv1gn4pSu30cca3conZ7mVRj+2hMje8E:tsoN82030ctsA7miyMJE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

573118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

a41bb50dd1b9cd3bb9bfb5dfda6fef60_JaffaCakes118

scandocuments2020.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

a41bb50dd1b9cd3bb9bfb5dfda6fef60_JaffaCakes118

scandocuments2020.exe

mscoree

dotnet