00b5651ed0c0b7c5f450b4c9c5113655_JaffaCakes118

General

Target
00b5651ed0c0b7c5f450b4c9c5113655_JaffaCakes118
Size 362KB
Sample240622-b35sbs1fkf
SHA256 e0e5ed56a2f12522e83a78e2164979b3abee9e7163e9542242708217d4a5144c
MD5 00b5651ed0c0b7c5f450b4c9c5113655
SHA1 c144c1abfa8ce2d0950da67cf250bea9e55c9768
SHA512 21521b747be24a377182ec524e7ccf26b5764b3b4c918cf673b16349ad4e638395d7b764409b0289e92889130d66fe00b1edfa9f4db6514295b0864d6e6cb613
SSDEEP 6144:KDBp/idevHN/8pziypuLsyf3OZC8ESr25V/VSP8yqAygHOdfyDEBzHOB1bR:K1p/ideZCpEsycNEKqJVSP8ynCK2OB1l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INV WJD000030036000137675999, pdf.scr

File Explorer

00b5651ed0c0b7c5f450b4c9c5113655_JaffaCakes118

.rar 362KB
INV WJD000030036000137675999, pdf.scr

.exe 612KB

00b5651ed0c0b7c5f450b4c9c5113655_JaffaCakes118

SHA256 e0e5ed56a2f12522e83a78e2164979b3abee9e7163e9542242708217d4a5144c
MD5 00b5651ed0c0b7c5f450b4c9c5113655
SHA1 c144c1abfa8ce2d0950da67cf250bea9e55c9768
SHA512 21521b747be24a377182ec524e7ccf26b5764b3b4c918cf673b16349ad4e638395d7b764409b0289e92889130d66fe00b1edfa9f4db6514295b0864d6e6cb613
SSDEEP 6144:KDBp/idevHN/8pziypuLsyf3OZC8ESr25V/VSP8yqAygHOdfyDEBzHOB1bR:K1p/ideZCpEsycNEKqJVSP8ynCK2OB1l
MD5 SHA1 SHA512 SSDEEP

INV WJD000030036000137675999, pdf.scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 64c73b41940ad0345b978a0118d9811e5dff411c1c7fd21425eda73066a5bbe1
MD5 77a9a0e39c83f3a563ab7d0b4bc81e57
SHA1 9fca02e81457ab52572b8befae86d6b1a978e4ea
SHA512 433b37947c4bc4940e5eed264576ac477e1b8870950f31a966c159c01745d6dbc562270eb4cad98d4385b7e08a579ff2851565d7c6ddf71dafeebc17e2aa919b
SSDEEP 6144:m5rEitdbvWkfRGhW5o0++yZTkXkYQBoQuwSzgue27JdctchbXTF2XL0D+jCxcXI7:PfTkXkdB9u/EuP962h9DuXI7EtlyAKp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

430966

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

00b5651ed0c0b7c5f450b4c9c5113655_JaffaCakes118

INV WJD000030036000137675999, pdf.scr

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

00b5651ed0c0b7c5f450b4c9c5113655_JaffaCakes118

INV WJD000030036000137675999, pdf.scr

mscoree

dotnet