a4cf567eb34e2cd8b810fdefa5de287f_JaffaCakes118

General

Target
a4cf567eb34e2cd8b810fdefa5de287f_JaffaCakes118
Size 285KB
Sample240613-k9a1zawfml
SHA256 2362fc85d535db225ffe1c28ca9844797b231871ac95ea272eae1084bb6aff40
MD5 a4cf567eb34e2cd8b810fdefa5de287f
SHA1 2b08cecd762f2d4aa9c7dc6b4f1cea13a901495b
SHA512 fe1a3f10c3739d7f661f74ea10476e0f14e23296abd139300c1b79a7f897d29273433d6512b2c0c3cafc0d6d25b7482c641d3fb8dd619ba72ae2142a0c48c599
SSDEEP 3072:KLjXm0oXsvabi/llsWsAd2efYL6g1wyz6hVeqXGBNl/VClxK7navad1JciA9gBFl:KHNcEEpeJQ+8wyzKZiVClxkaz4IpK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a4cf567eb34e2cd8b810fdefa5de287f_JaffaCakes118

.exe 285KB

a4cf567eb34e2cd8b810fdefa5de287f_JaffaCakes118

IMPHASH a8f737d51812b6886d60e29c978f4242
SHA256 2362fc85d535db225ffe1c28ca9844797b231871ac95ea272eae1084bb6aff40
MD5 a4cf567eb34e2cd8b810fdefa5de287f
SHA1 2b08cecd762f2d4aa9c7dc6b4f1cea13a901495b
SHA512 fe1a3f10c3739d7f661f74ea10476e0f14e23296abd139300c1b79a7f897d29273433d6512b2c0c3cafc0d6d25b7482c641d3fb8dd619ba72ae2142a0c48c599
SSDEEP 3072:KLjXm0oXsvabi/llsWsAd2efYL6g1wyz6hVeqXGBNl/VClxK7navad1JciA9gBFl:KHNcEEpeJQ+8wyzKZiVClxkaz4IpK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

e5:7a:7b:27:8b:e6:84:10:ea:99:90:da:bd:18:1c:ec:83:72:f5:28

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Daniel Hareuveni,O=Daniel Hareuveni,POSTALCODE=6958301,STREET=Yair Rozenblum 15,L=Tel aviv,ST=Israel,C=IL

Chains

Jun 12, 2024

Minor OS version

1

Major OS version

5

Entry point

26278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

a4cf567eb34e2cd8b810fdefa5de287f_JaffaCakes118

PE Signature issue

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

a4cf567eb34e2cd8b810fdefa5de287f_JaffaCakes118

PE Signature issue

kernel32

generic