General

  • Target
    a7728562c9d2d733cac56f4eea629afb_JaffaCakes118
  • Size 3.7MB
  • Sample240614-behb5ayepc
  • SHA256 ef4a2ad08c55e0a5404d1293128987e7b5d5b27a5ad2fcf54bd06d0cd9eb361c
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • a7728562c9d2d733cac56f4eea629afb_JaffaCakes118
    .exe 3.7MB

a7728562c9d2d733cac56f4eea629afb_JaffaCakes118

  • SHA256 ef4a2ad08c55e0a5404d1293128987e7b5d5b27a5ad2fcf54bd06d0cd9eb361c
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
b8:39:85:1d:a8:4d:7b:49:0a:e3:e1:ec:81:c2:e1:ee:a0:88:fd:e9:f4:41:cd:25:1a:72:3b:93:69:03:08:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=@ByELDI
Chains

Oct 7, 2017

PE Signature issue

Digest
6b:a4:d5:18:7b:db:30:b7:e5:5b:85:5a:7b:4c:fd:ae:15:fe:2c:ee
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=@ByELDI
Chains

Oct 7, 2017

Minor OS version
0
Major OS version
1
Entry point
43672
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths