a61e79c0500dc02a5762e4454b552f2b_JaffaCakes118

General

Target
a61e79c0500dc02a5762e4454b552f2b_JaffaCakes118
Size 686KB
Sample240613-r8rewstcjf
SHA256 10870181ef698564636ecb7a915110272f80a21e9787628338008ea7b49b041f
MD5 a61e79c0500dc02a5762e4454b552f2b
SHA1 473331ec700097dac496d5a3079001e14970fd84
SHA512 ef2ccb5dc44320977fda9d2124cfd377619b34eb46340cb00eea4207e451eb0a7e9dce6c9ac1d0bea5a023f533e17633e6c44fcb8f50f7f664659014e33e04da
SSDEEP 12288:AIMPYsTtV0GCssn6K2uX/Wcm38cDESXbUHV6a:FMPYsf0G09pWR38cDEOUHV6a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a61e79c0500dc02a5762e4454b552f2b_JaffaCakes118

File Explorer

a61e79c0500dc02a5762e4454b552f2b_JaffaCakes118

.exe 686KB

a61e79c0500dc02a5762e4454b552f2b_JaffaCakes118

IMPHASH 5830a9515f55282cfd024df908160e4c
SHA256 10870181ef698564636ecb7a915110272f80a21e9787628338008ea7b49b041f
MD5 a61e79c0500dc02a5762e4454b552f2b
SHA1 473331ec700097dac496d5a3079001e14970fd84
SHA512 ef2ccb5dc44320977fda9d2124cfd377619b34eb46340cb00eea4207e451eb0a7e9dce6c9ac1d0bea5a023f533e17633e6c44fcb8f50f7f664659014e33e04da
SSDEEP 12288:AIMPYsTtV0GCssn6K2uX/Wcm38cDESXbUHV6a:FMPYsf0G09pWR38cDEOUHV6a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

71860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

350KB

Virtual Size

409KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sdata

Size

122KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

a61e79c0500dc02a5762e4454b552f2b_JaffaCakes118

kernel32

shell32

generic

Sharing

General

Malware Config

Signatures

File Explorer

a61e79c0500dc02a5762e4454b552f2b_JaffaCakes118

kernel32

shell32

generic