0006d21761813b1e8d42dbd07194cb21_JaffaCakes118

General

Target
0006d21761813b1e8d42dbd07194cb21_JaffaCakes118
Size 2.0MB
Sample240619-xe2aws1ejk
SHA256 ef3423b54a951bfb99cf09efcb3217e9f5dd46f2969e76b83cbbf27dbaefca25
MD5 0006d21761813b1e8d42dbd07194cb21
SHA1 5f8e9a9ce5fbee0662957b59b96c5875954c6abc
SHA512 f342c0d589d2cd05828072b04af2fc06286444b1838f16b99757f80511d3a62654002cabba05acd03807d3f66cb643f778536edcec3240661874b5a41814aee7
SSDEEP 384:2PyZNjtU2m3QBLDHcvfbcNhItjj54zEln7mEq:2yZeiDwTc4ZjWElnfq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0006d21761813b1e8d42dbd07194cb21_JaffaCakes118

File Explorer

0006d21761813b1e8d42dbd07194cb21_JaffaCakes118

.dll 2.0MB

0006d21761813b1e8d42dbd07194cb21_JaffaCakes118

SHA256 ef3423b54a951bfb99cf09efcb3217e9f5dd46f2969e76b83cbbf27dbaefca25
MD5 0006d21761813b1e8d42dbd07194cb21
SHA1 5f8e9a9ce5fbee0662957b59b96c5875954c6abc
SHA512 f342c0d589d2cd05828072b04af2fc06286444b1838f16b99757f80511d3a62654002cabba05acd03807d3f66cb643f778536edcec3240661874b5a41814aee7
SSDEEP 384:2PyZNjtU2m3QBLDHcvfbcNhItjj54zEln7mEq:2yZeiDwTc4ZjWElnfq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17836

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

118B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0006d21761813b1e8d42dbd07194cb21_JaffaCakes118

generic