0b39b6cc8f6375930ca48f3b49b69460_JaffaCakes118

General

Target
0b39b6cc8f6375930ca48f3b49b69460_JaffaCakes118
Size 92KB
Sample240624-3b459s1bpr
SHA256 763f2a2c093657a0b7b4c904cd33ec590bfb7e8a60b4ba5d0a710f01fdac1bd7
MD5 0b39b6cc8f6375930ca48f3b49b69460
SHA1 54cf08a141453a7379608c784b68938b014dbbaf
SHA512 dde91df2c2573a4ce582fce1cdc207e86ec263a2c3bc005d8b2ed5eff9e5a5fe855a8cc08f6050980f0912e5669a4f5d6d28474e20d51263a5d1e417189145f7
SSDEEP 1536:dVZnxm6MG9xgfrvEaoiT/GyphjXDYjKwttoswRmhApE:tnxwgxgfR/DVG7wBpE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b39b6cc8f6375930ca48f3b49b69460_JaffaCakes118

File Explorer

0b39b6cc8f6375930ca48f3b49b69460_JaffaCakes118

.exe 92KB

0b39b6cc8f6375930ca48f3b49b69460_JaffaCakes118

IMPHASH 3cba1ed6640987387f2c728a00db04c4
SHA256 763f2a2c093657a0b7b4c904cd33ec590bfb7e8a60b4ba5d0a710f01fdac1bd7
MD5 0b39b6cc8f6375930ca48f3b49b69460
SHA1 54cf08a141453a7379608c784b68938b014dbbaf
SHA512 dde91df2c2573a4ce582fce1cdc207e86ec263a2c3bc005d8b2ed5eff9e5a5fe855a8cc08f6050980f0912e5669a4f5d6d28474e20d51263a5d1e417189145f7
SSDEEP 1536:dVZnxm6MG9xgfrvEaoiT/GyphjXDYjKwttoswRmhApE:tnxwgxgfR/DVG7wBpE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4396

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

5KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.debug

Size

75KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

vfrtvdp

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ropfcen

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

0b39b6cc8f6375930ca48f3b49b69460_JaffaCakes118

kernel32

user32

advapi32

shlwapi

generic

Sharing

General

Malware Config

Signatures

File Explorer

0b39b6cc8f6375930ca48f3b49b69460_JaffaCakes118

kernel32

user32

advapi32

shlwapi

generic