11a8ec571084da7527bbaff590961961_JaffaCakes118

General

Target
11a8ec571084da7527bbaff590961961_JaffaCakes118
Size 100KB
Sample240626-mdrd7asfpr
SHA256 a61941323d0c15a0ac33000a8c156e2058a40a6e2afe99df4b06079ec88a3c18
MD5 11a8ec571084da7527bbaff590961961
SHA1 845e37c92f1331c500c8d9296383a594b94a7b21
SHA512 5cb1788e4cd44f752eb8a4757d83e17fb8651edd0b1512db9926ae469118dd4b7a3c079c9e489a9ce08d74a3badae3962d5991d9b566109de871b557ec434bd4
SSDEEP 3072:5ibTTp78CcWi4KygA/EY9Y6wsYaHyGWN8eV9lwOz4hv:KT14ikAR9Y6wZG8P9lwgW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11a8ec571084da7527bbaff590961961_JaffaCakes118

File Explorer

11a8ec571084da7527bbaff590961961_JaffaCakes118

.dll 100KB

11a8ec571084da7527bbaff590961961_JaffaCakes118

IMPHASH 89710c7d4d8bf03322e48fa40e2124ef
SHA256 a61941323d0c15a0ac33000a8c156e2058a40a6e2afe99df4b06079ec88a3c18
MD5 11a8ec571084da7527bbaff590961961
SHA1 845e37c92f1331c500c8d9296383a594b94a7b21
SHA512 5cb1788e4cd44f752eb8a4757d83e17fb8651edd0b1512db9926ae469118dd4b7a3c079c9e489a9ce08d74a3badae3962d5991d9b566109de871b557ec434bd4
SSDEEP 3072:5ibTTp78CcWi4KygA/EY9Y6wsYaHyGWN8eV9lwOz4hv:KT14ikAR9Y6wZG8P9lwgW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

36864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

720B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

648B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

11a8ec571084da7527bbaff590961961_JaffaCakes118

msvcrt

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

11a8ec571084da7527bbaff590961961_JaffaCakes118

msvcrt

kernel32

generic