b6b51be0520bfcaad93b457a441688e3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b6b51be0520bfcaad93b457a441688e3_JaffaCakes118
Size 346KB
Sample240617-evhvdatemg
SHA256 cc3e2f7cc6f9ae027adfec912f9f5b0e940512b73bb3419f9db4ee9d6ac0a84d
MD5 b6b51be0520bfcaad93b457a441688e3
SHA1 0f66514f6d3bde763275fe00ece2e94dddbb5c17
SHA512 6a65779ef2719e451f2467331cd21d74f00f08384756e5e86f719557cc294617f813cbf116bfded23d80cf058d72ba5ffe022156b334e2750c9d8c46f2bbbfd1
SSDEEP 6144:qaJIiGfiGP4E2b7z/TU4QyAB6UeZSlxHL7sb/TwhhVYlgrsBgNLeoDaHCBMJPoa:qaJIiUizL/frk6xw7sbTwjVYIsBgNLeL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT_ADVICE NCB6290003457110200.exe

File Explorer

b6b51be0520bfcaad93b457a441688e3_JaffaCakes118

.gz 346KB
PAYMENT_ADVICE NCB6290003457110200.exe

.exe 595KB

b6b51be0520bfcaad93b457a441688e3_JaffaCakes118

SHA256 cc3e2f7cc6f9ae027adfec912f9f5b0e940512b73bb3419f9db4ee9d6ac0a84d
MD5 b6b51be0520bfcaad93b457a441688e3
SHA1 0f66514f6d3bde763275fe00ece2e94dddbb5c17
SHA512 6a65779ef2719e451f2467331cd21d74f00f08384756e5e86f719557cc294617f813cbf116bfded23d80cf058d72ba5ffe022156b334e2750c9d8c46f2bbbfd1
SSDEEP 6144:qaJIiGfiGP4E2b7z/TU4QyAB6UeZSlxHL7sb/TwhhVYlgrsBgNLeoDaHCBMJPoa:qaJIiUizL/frk6xw7sbTwjVYIsBgNLeL
MD5 SHA1 SHA512 SSDEEP

PAYMENT_ADVICE NCB6290003457110200.exe

SHA256 4ca9b45f58ea29095253e13f744267b11cb632aed3aad9e3e4abee0d153d9d38
MD5 38c3d61edf3f095d58a36a65ba15c8e8
SHA1 7a86f2f6b648de12fe26d717dcb435a99393fc83
SHA512 b967b597140e16e58affc28152bd7009960dede4921801efd3397c26417cb1fe2285304d431f7e2a7467d9cf4c6f32671a108fa8de3cd01b529f4d4d58fcdc96
SSDEEP 12288:VEv8FVujUpVTWgThfJ614X5p/iYHI0Oq8M0oko8ZiFhDF8KSpTTj/Xi0wbO/a3:VEEbuQ9WmD1HITPTnXi0wbqa3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

424416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

411KB

Virtual Size

410KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

140KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b6b51be0520bfcaad93b457a441688e3_JaffaCakes118

PAYMENT_ADVICE NCB6290003457110200.exe

generic