a7640fd71c6d24617426fc607c27d7d4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a7640fd71c6d24617426fc607c27d7d4_JaffaCakes118
Size 480KB
Sample240614-a6ff6ssbkp
SHA256 333c5bfc40de9d337285c7aaf2f8c864cf171f045330accd16311f19cbd943a0
MD5 a7640fd71c6d24617426fc607c27d7d4
SHA1 787e3d5751a7aaba47ed37744301c6c798f3e1fb
SHA512 83cd0a0e9633697a84252b50f617f7d91cca27590278fda98ca7743d599a475c2b04128c1348ddbb28cba9d9d4adecb275e8b21110c540455c4bf6375a7f0f56
SSDEEP 12288:cUl6Nu4IBGcKwgpH5+sEPupoJ/kN54TSpzW:cUf5YwAHU7upR54OI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Scan002.scr

File Explorer

a7640fd71c6d24617426fc607c27d7d4_JaffaCakes118

.zip 480KB
Scan002.scr

.exe 934KB

a7640fd71c6d24617426fc607c27d7d4_JaffaCakes118

SHA256 333c5bfc40de9d337285c7aaf2f8c864cf171f045330accd16311f19cbd943a0
MD5 a7640fd71c6d24617426fc607c27d7d4
SHA1 787e3d5751a7aaba47ed37744301c6c798f3e1fb
SHA512 83cd0a0e9633697a84252b50f617f7d91cca27590278fda98ca7743d599a475c2b04128c1348ddbb28cba9d9d4adecb275e8b21110c540455c4bf6375a7f0f56
SSDEEP 12288:cUl6Nu4IBGcKwgpH5+sEPupoJ/kN54TSpzW:cUf5YwAHU7upR54OI
MD5 SHA1 SHA512 SSDEEP

Scan002.scr

SHA256 fdd38680eee0ca843044e98abda050bcb9dd7a2eff660ecbc83740362ff38e34
MD5 0993f223d8758522c7fe48f62490026c
SHA1 82d4a3afa8e1a5793a675c607e0fd17d9a172c49
SHA512 3a2dbb292f1405918e824e2b4c05de38cbd73834ffea9971e5f16fcc2df5c47bad6bc8e286720f45502e32df31aad9fe7e01e3bc69fdf4beacccb7e75c1dc18f
SSDEEP 12288:vGhUC31Ozntm/NYjhz1JgII52tfpEYXcMobA2ROniLIzr8r0TizEIbkQtgT/XMT5:y3Stm1oz7VXXXcuxaggeJixDKVc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

731348

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

710KB

Virtual Size

710KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

135KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a7640fd71c6d24617426fc607c27d7d4_JaffaCakes118

Scan002.scr

generic