0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118

General

Target
0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118
Size 75KB
Sample240625-1f7qvavcph
SHA256 c2ddfd999e58c0cce9f42ffa675570ccdda5c94a6946d8ff583d9fa1a8ffe4a4
MD5 0f9dcdd9e2b769cd8496e5f87376a805
SHA1 f772b77633159cec736a0d3993da705d2845e15f
SHA512 a74fe59958da74248fad377225c899c1c8400b75b0fff6fb7835b220b19bf3b70d7512fb3043df776ae5a3cbc98251a29f6ee638546805b57fe50cfee9bbeaa8
SSDEEP 1536:qUaySrC1D5Ngs+fngwQrZlnedrX6v1ARMC0+DOBXcOiIY2yN:ZvvZbr2rX6vQMC0+61K1N
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118

File Explorer

0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118

.exe 75KB

0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118

IMPHASH c49d68c0f4ffc859a0730f9d64be5ed6
SHA256 c2ddfd999e58c0cce9f42ffa675570ccdda5c94a6946d8ff583d9fa1a8ffe4a4
MD5 0f9dcdd9e2b769cd8496e5f87376a805
SHA1 f772b77633159cec736a0d3993da705d2845e15f
SHA512 a74fe59958da74248fad377225c899c1c8400b75b0fff6fb7835b220b19bf3b70d7512fb3043df776ae5a3cbc98251a29f6ee638546805b57fe50cfee9bbeaa8
SSDEEP 1536:qUaySrC1D5Ngs+fngwQrZlnedrX6v1ARMC0+DOBXcOiIY2yN:ZvvZbr2rX6vQMC0+61K1N
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

420B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

xata1

Size

1024B

Virtual Size

1000B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

xata2

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

514B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118

kernel32

generic