000579bf819e84713ef73a09eebbba70_JaffaCakes118

General

Target
000579bf819e84713ef73a09eebbba70_JaffaCakes118
Size 24KB
Sample240619-xdz2fa1dnm
SHA256 816536357f63094ae3e991787521a1b2c9d3c47c3dc832db921c76cd8110fb94
MD5 000579bf819e84713ef73a09eebbba70
SHA1 369d061094ae4bf5ab6cba505ab2ce73df184754
SHA512 907ed7d69ada8903f64bd46f2a21efd4b9fc54fa597fd2d32eac6afb024aabc7e591bae9ebc3a2144472b837c3665420b945099d5737d7d6408d9dd168ca1393
SSDEEP 384:pdD9d6G4f/r136aNX9544xHZAVDPWrGhjWBEBAwazwIU7tNa5i/Yku:pKEUaVDPWrGWqawIU7Ci/Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000579bf819e84713ef73a09eebbba70_JaffaCakes118

File Explorer

000579bf819e84713ef73a09eebbba70_JaffaCakes118

.dll 24KB

000579bf819e84713ef73a09eebbba70_JaffaCakes118

SHA256 816536357f63094ae3e991787521a1b2c9d3c47c3dc832db921c76cd8110fb94
MD5 000579bf819e84713ef73a09eebbba70
SHA1 369d061094ae4bf5ab6cba505ab2ce73df184754
SHA512 907ed7d69ada8903f64bd46f2a21efd4b9fc54fa597fd2d32eac6afb024aabc7e591bae9ebc3a2144472b837c3665420b945099d5737d7d6408d9dd168ca1393
SSDEEP 384:pdD9d6G4f/r136aNX9544xHZAVDPWrGhjWBEBAwazwIU7tNa5i/Yku:pKEUaVDPWrGWqawIU7Ci/Y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

21976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

118B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

000579bf819e84713ef73a09eebbba70_JaffaCakes118

generic