00160b9b1084cd4b9ee05a852e527b72_JaffaCakes118

General

Target
00160b9b1084cd4b9ee05a852e527b72_JaffaCakes118
Size 20KB
Sample240619-xrb7jaxdph
SHA256 3467bdb07c537c22deb220381fb740bc7979efe1a9b6102a4e64e9ee73985f00
MD5 00160b9b1084cd4b9ee05a852e527b72
SHA1 bb85b57e8f65573d6efa6ab6ef7ca976a5d12ed3
SHA512 84b4b9ccdff2664e06e75cbb3d7e2a641d92dabb6ef7ec04593938401fb847d9370529070b468740b192f7f50d760e230cd0b287dc60ad0394bcf0c21ba87f48
SSDEEP 384:TPyZNjtU2m/gxDAdGp6Lc/jomYO/NAXjJIbzEiKIX51:byZmKA6xjzYO/2zJAEiKIX3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00160b9b1084cd4b9ee05a852e527b72_JaffaCakes118

File Explorer

00160b9b1084cd4b9ee05a852e527b72_JaffaCakes118

.dll 20KB

00160b9b1084cd4b9ee05a852e527b72_JaffaCakes118

SHA256 3467bdb07c537c22deb220381fb740bc7979efe1a9b6102a4e64e9ee73985f00
MD5 00160b9b1084cd4b9ee05a852e527b72
SHA1 bb85b57e8f65573d6efa6ab6ef7ca976a5d12ed3
SHA512 84b4b9ccdff2664e06e75cbb3d7e2a641d92dabb6ef7ec04593938401fb847d9370529070b468740b192f7f50d760e230cd0b287dc60ad0394bcf0c21ba87f48
SSDEEP 384:TPyZNjtU2m/gxDAdGp6Lc/jomYO/NAXjJIbzEiKIX51:byZmKA6xjzYO/2zJAEiKIX3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

118B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

00160b9b1084cd4b9ee05a852e527b72_JaffaCakes118

generic