a5601a1f697dd6c481224252efa8f6b1_JaffaCakes118

General

Target
a5601a1f697dd6c481224252efa8f6b1_JaffaCakes118
Size 785KB
Sample240613-nylvwaxdkc
SHA256 ddb20666ad19d907ff8dc6361e9ab00793542a736e8e17c4db64491af8c4f868
MD5 a5601a1f697dd6c481224252efa8f6b1
SHA1 7fa8641b141e448f1d4f8149746a343333748396
SHA512 6f4fed4acf7e18e97e6cb01ab1e3f4a6d81a40d6cae61a9b833a7f50bd1b4fc3710a0b604ea632fe5d1265e27fd53f846e9d334d4a291ac0c91edb29c7247948
SSDEEP 12288:79d2tGBJmJT6xENslj4dMTE0qXgtGBFmJvkR4rMhj41MB7Xj:7DDBJxxEQcMTE0qXdBFbR4mEMB7Xj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO# AA01728-....exe

File Explorer

a5601a1f697dd6c481224252efa8f6b1_JaffaCakes118

.zip 785KB
PO# AA01728-....exe

.exe 921KB

a5601a1f697dd6c481224252efa8f6b1_JaffaCakes118

SHA256 ddb20666ad19d907ff8dc6361e9ab00793542a736e8e17c4db64491af8c4f868
MD5 a5601a1f697dd6c481224252efa8f6b1
SHA1 7fa8641b141e448f1d4f8149746a343333748396
SHA512 6f4fed4acf7e18e97e6cb01ab1e3f4a6d81a40d6cae61a9b833a7f50bd1b4fc3710a0b604ea632fe5d1265e27fd53f846e9d334d4a291ac0c91edb29c7247948
SSDEEP 12288:79d2tGBJmJT6xENslj4dMTE0qXgtGBFmJvkR4rMhj41MB7Xj:7DDBJxxEQcMTE0qXdBFbR4mEMB7Xj
MD5 SHA1 SHA512 SSDEEP

PO# AA01728-....exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b9ef185d3f879ecb2a755aef91f48ac6de736185c1f16693afe21dabc70240b9
MD5 7b2bf102c84c32f698c158cdf1bc94be
SHA1 aaebeb07860fd8747184dce60ae40e96303b5615
SHA512 0980eb5a9b9e8e5c85321964874a025699755b4f2676151bfaadcf01a8c5fc287bbbd3223f2a792e09d7d3de5117d66cad71bb3872c29cacbfac8b1c93e2b683
SSDEEP 12288:DfZltGBRmJrQ5il8ljw1MP1xxgZltGBRmJrQ5il8ljw1MP1xx1k+0:bZ2BRL5i2CMPOZ2BRL5i2CMPQ+0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

948590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

a5601a1f697dd6c481224252efa8f6b1_JaffaCakes118

PO# AA01728-....exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

a5601a1f697dd6c481224252efa8f6b1_JaffaCakes118

PO# AA01728-....exe

mscoree

dotnet