b57e81787bff0560b0b783674dcb0cd8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b57e81787bff0560b0b783674dcb0cd8_JaffaCakes118
Size

9.9MB
MD5

b57e81787bff0560b0b783674dcb0cd8
SHA1

567add51c0152d003565cdc672bdfaae718fd5d6
SHA256

76d05f06b3b9379f6865c841147bc71dd12ae736c1d2d004a2cddcb5ad02fab8
SHA512

a7e26715996edca7aff46ebc5fda7c7b42f89af9db364b1bd9ae5c7d257a48c0ce2913d2df2792ec449ec29bdfdd892acde517777597a77000d2e0d38d87c5ad
SSDEEP

196608:JN/0aL52gK3AwV6F9E9RFzS8xenFQvW2LMhPfBVjBU100Pbp+DUp62sPGbx:XLBwm9EEAyuO2LgVyTPbp/Q2y4

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PES Ftex Converter/PES Ftex Converter/ICSharpCode.SharpZipLib.dll
unpack001/PES Ftex Converter/PES Ftex Converter/PES Ftex Converter.exe

Files

b57e81787bff0560b0b783674dcb0cd8_JaffaCakes118
.rar
PES Ftex Converter/PES Ftex Converter/ICSharpCode.SharpZipLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PES Ftex Converter/PES Ftex Converter/PES Ftex Converter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

1UC*K>x
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PES Ftex Converter/PES-files.png
.png
PES Ftex Converter/uefa_gimn_ligi_chempionov_(NaitiMP3.ru).mp3

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 184KB - Virtual size: 183KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

1UC*K>x Size: 93KB - Virtual size: 93KB

.text Size: 112KB - Virtual size: 111KB

.rsrc Size: 27KB - Virtual size: 27KB

.reloc Size: 512B - Virtual size: 12B

Size: 512B - Virtual size: 16B

.text
Size: 184KB - Virtual size: 183KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

1UC*K>x
Size: 93KB - Virtual size: 93KB

.text
Size: 112KB - Virtual size: 111KB

.rsrc
Size: 27KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 12B