b86b31be2021cf44db48e840e592df4a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b86b31be2021cf44db48e840e592df4a_JaffaCakes118
Size 452KB
Sample240617-nsd8vayfmc
SHA256 41f0fd82d49d076b8a0ddc92cf20ca2088c26d5c7c271ef21354b55d9434fa80
MD5 b86b31be2021cf44db48e840e592df4a
SHA1 72ac05728de00f6f7ab8afe767cfa1b027ee29b6
SHA512 c6a0cb1bf02b2a65003674ddc32a02064ec013e25a31cc0aaf759a67bb47eb5542cef3b104a59f168d224b05024236d42bf7ffa454c604286b063bf6d9b00c59
SSDEEP 12288:2p09U6DlxuRgMyBsiFJY6kHVSQAgvD3W1vsGERwh4:2aC65ERgMgsyJzCVZDG1vsGEOu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Item list.exe

File Explorer

b86b31be2021cf44db48e840e592df4a_JaffaCakes118

.rar 452KB
Item list.exe

.exe 824KB

b86b31be2021cf44db48e840e592df4a_JaffaCakes118

SHA256 41f0fd82d49d076b8a0ddc92cf20ca2088c26d5c7c271ef21354b55d9434fa80
MD5 b86b31be2021cf44db48e840e592df4a
SHA1 72ac05728de00f6f7ab8afe767cfa1b027ee29b6
SHA512 c6a0cb1bf02b2a65003674ddc32a02064ec013e25a31cc0aaf759a67bb47eb5542cef3b104a59f168d224b05024236d42bf7ffa454c604286b063bf6d9b00c59
SSDEEP 12288:2p09U6DlxuRgMyBsiFJY6kHVSQAgvD3W1vsGERwh4:2aC65ERgMgsyJzCVZDG1vsGEOu
MD5 SHA1 SHA512 SSDEEP

Item list.exe

SHA256 c50e9e99a365c6770569ca96ac2482b3bd82f946d41946e836a010ca429a7a4d
MD5 4ab37170a0891f9679ec726e106436f8
SHA1 6b47daea0961a178c46856572fe85990334977c2
SHA512 51bd33190f5b3b0eacbdfa61f90c21e62e9b168ece5f88504eb8acc6a71c469a824f59fb7ac612d16c4c9f1a5df88ae432989adb927efe7f003dfc62559c7234
SSDEEP 12288:AY2SRgOu9uO2dm4rqoXa3p11fSxNXie7nG1nBsrwE9t/3a2pMsI4d:AxSJvObTV370xJaBqwC3lMkd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

351704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

340KB

Virtual Size

339KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

361KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b86b31be2021cf44db48e840e592df4a_JaffaCakes118

Item list.exe

generic