a6350ce23828bae78c7abc9b80c848b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a6350ce23828bae78c7abc9b80c848b2_JaffaCakes118
Size 307KB
Sample240613-sm5aasyblm
SHA256 11f52c469fa436060652b1c0cbd924f5a908a6bf858ab191da5968f8aabefe72
MD5 a6350ce23828bae78c7abc9b80c848b2
SHA1 74c1af88dde4de3a912bd927b51799ae5b3929c1
SHA512 090d249140c6791721d90de77c04c17949281857fb0b5c652a880b5d7b74b415b1330b5abdb4c48db9713fdfd3f87ea2463d15eace6736ac43ce3ea21fcf0e11
SSDEEP 3072:62+pd9eOPAlw1DiEIa3EWRcwtFhW19azVkUGSWt3jD7sQGiZtuynwYsdCwyx:/+p75JCa3EWR7XhW195RjGiZVwpCw+
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a6350ce23828bae78c7abc9b80c848b2_JaffaCakes118

.exe 307KB

a6350ce23828bae78c7abc9b80c848b2_JaffaCakes118

IMPHASH 42d01564d678f2d3f4acaba0a8dff9dd
SHA256 11f52c469fa436060652b1c0cbd924f5a908a6bf858ab191da5968f8aabefe72
MD5 a6350ce23828bae78c7abc9b80c848b2
SHA1 74c1af88dde4de3a912bd927b51799ae5b3929c1
SHA512 090d249140c6791721d90de77c04c17949281857fb0b5c652a880b5d7b74b415b1330b5abdb4c48db9713fdfd3f87ea2463d15eace6736ac43ce3ea21fcf0e11
SSDEEP 3072:62+pd9eOPAlw1DiEIa3EWRcwtFhW19azVkUGSWt3jD7sQGiZtuynwYsdCwyx:/+p75JCa3EWR7XhW195RjGiZVwpCw+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

85:c1:56:30:cc:bd:91:7e:65:1d:7c:ae:31:6e:bb:a7:24:32:2d:49

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Daniel Hareuveni,O=Daniel Hareuveni,POSTALCODE=6958301,STREET=Yair Rozenblum 15,L=Tel aviv,ST=Israel,C=IL

Chains

Jun 12, 2024

Minor OS version

Major OS version

Entry point

33691

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data3

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

a6350ce23828bae78c7abc9b80c848b2_JaffaCakes118

PE Signature issue

kernel32

generic