a48f149c430c8302ce073bc7f36ba1e1_JaffaCakes118

General

Target
a48f149c430c8302ce073bc7f36ba1e1_JaffaCakes118
Size 315KB
Sample240613-j16kvavanm
SHA256 b8723751715fdb109612a4a33ebda3303311eabf10e1e076376e40a40a9395b9
MD5 a48f149c430c8302ce073bc7f36ba1e1
SHA1 902a8ec6d9bdde71a164a29ed76e398f2d36a432
SHA512 1cd4b04bc8319b36d4328d23c0a344ac94f33a1f0175070eb7148e82ffb40b330ecde22edff7c926e7b91b0ab7d5a27dd8a24bcc77ffa07baf5a5a788a54ac83
SSDEEP 6144:crZbUzkuvcBYC47l2xvsmBljx/NpPOFczFPMKVb0VmMkL:crKkuveY3anBhVPOCF90VmMO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a48f149c430c8302ce073bc7f36ba1e1_JaffaCakes118

.exe 315KB

a48f149c430c8302ce073bc7f36ba1e1_JaffaCakes118

IMPHASH a8286b574ff850cd002ea6282d15aa40
SHA256 b8723751715fdb109612a4a33ebda3303311eabf10e1e076376e40a40a9395b9
MD5 a48f149c430c8302ce073bc7f36ba1e1
SHA1 902a8ec6d9bdde71a164a29ed76e398f2d36a432
SHA512 1cd4b04bc8319b36d4328d23c0a344ac94f33a1f0175070eb7148e82ffb40b330ecde22edff7c926e7b91b0ab7d5a27dd8a24bcc77ffa07baf5a5a788a54ac83
SSDEEP 6144:crZbUzkuvcBYC47l2xvsmBljx/NpPOFczFPMKVb0VmMkL:crKkuveY3anBhVPOCF90VmMO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1d:5b:a5:a4:8f:4d:0f:c0:18:b9:2f:db:dd:e9:3f:a5:26:f1:01:36

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Stanislav Kabin,O=Stanislav Kabin,C=RU,1.2.840.113549.1.9.1=#0c1b5374616e69736c61762e4b6162696e40686f746d61696c2e636f6d

Chains

Jun 12, 2024

Minor OS version

0

Major OS version

4

Entry point

5339

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Dev\Tin7\InstallDir\vc80-win32u\Loader.pdb

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.tsustub

Size

118KB

Virtual Size

118KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.tsuarch

Size

172KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

a48f149c430c8302ce073bc7f36ba1e1_JaffaCakes118

PE Signature issue

kernel32

user32

version

generic

Sharing

General

Malware Config

Signatures

File Explorer

a48f149c430c8302ce073bc7f36ba1e1_JaffaCakes118

PE Signature issue

kernel32

user32

version

generic