b548a2e179907d05b6b91de5db865957_JaffaCakes118

General

Target
b548a2e179907d05b6b91de5db865957_JaffaCakes118
Size 360KB
Sample240616-z96j7ssfpm
SHA256 6476dc4d4cf45ff08448309f65e1702c2770a93ef002475294c546e19bd717f0
MD5 b548a2e179907d05b6b91de5db865957
SHA1 c472e35f13fd7a3a5a5b2bb9cf0683bbfa6faf03
SHA512 4318e7b12bf2cf14d190e91b30313484efbba370f166829e58a43c19d5e479f3167dfc9cbe7d0683d73f245d4b2ee752ec6007811c4a879ae51a133048bcffd9
SSDEEP 6144:HSfBiH4YIwLseDtcixL1V02VcKUGstieOWEK0kVW:ygp1hcil1VBueNxnIW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b548a2e179907d05b6b91de5db865957_JaffaCakes118

File Explorer

b548a2e179907d05b6b91de5db865957_JaffaCakes118

.exe 360KB

b548a2e179907d05b6b91de5db865957_JaffaCakes118

IMPHASH e556ebefc0a628797b5b15e1ff163f58
SHA256 6476dc4d4cf45ff08448309f65e1702c2770a93ef002475294c546e19bd717f0
MD5 b548a2e179907d05b6b91de5db865957
SHA1 c472e35f13fd7a3a5a5b2bb9cf0683bbfa6faf03
SHA512 4318e7b12bf2cf14d190e91b30313484efbba370f166829e58a43c19d5e479f3167dfc9cbe7d0683d73f245d4b2ee752ec6007811c4a879ae51a133048bcffd9
SSDEEP 6144:HSfBiH4YIwLseDtcixL1V02VcKUGstieOWEK0kVW:ygp1hcil1VBueNxnIW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

O_8!Iz

Size

148KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

148KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

36KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

b548a2e179907d05b6b91de5db865957_JaffaCakes118

user32

msvcrt

pdh

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

b548a2e179907d05b6b91de5db865957_JaffaCakes118

user32

msvcrt

pdh

kernel32

generic