0009b598bf82d57db0c2efec67cee8ec_JaffaCakes118

General

Target
0009b598bf82d57db0c2efec67cee8ec_JaffaCakes118
Size 511KB
Sample240619-xhksba1err
SHA256 4057329f9910f6abda0c1dbcfa8d62a54923bd8f248aaf4c12361f1d27508b95
MD5 0009b598bf82d57db0c2efec67cee8ec
SHA1 b85e1033683a92d75f8ff6519c00d482930a807a
SHA512 f1e19cd15bcf0a080a53dd018ee1a4e892717412343c58a99dbc70bd5181328bc51a00a7f48c1b6b40c752a6250343797453dfa528baef0ba5dcf2b9e5d1e52b
SSDEEP 384:IpdNjtU2OCu5fNFpHtsfsjlcJctq9jU/ovE87mTTlz6nU02jCi:IpdGVXNImtqJU/oy6nTLi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0009b598bf82d57db0c2efec67cee8ec_JaffaCakes118

File Explorer

0009b598bf82d57db0c2efec67cee8ec_JaffaCakes118

.dll 511KB

0009b598bf82d57db0c2efec67cee8ec_JaffaCakes118

SHA256 4057329f9910f6abda0c1dbcfa8d62a54923bd8f248aaf4c12361f1d27508b95
MD5 0009b598bf82d57db0c2efec67cee8ec
SHA1 b85e1033683a92d75f8ff6519c00d482930a807a
SHA512 f1e19cd15bcf0a080a53dd018ee1a4e892717412343c58a99dbc70bd5181328bc51a00a7f48c1b6b40c752a6250343797453dfa528baef0ba5dcf2b9e5d1e52b
SSDEEP 384:IpdNjtU2OCu5fNFpHtsfsjlcJctq9jU/ovE87mTTlz6nU02jCi:IpdGVXNImtqJU/oy6nTLi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19780

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

236B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

145B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0009b598bf82d57db0c2efec67cee8ec_JaffaCakes118

generic