17a7fadae74b86c509a54052f953e4da_JaffaCakes118

General

Target
17a7fadae74b86c509a54052f953e4da_JaffaCakes118
Size 517KB
Sample240627-1pschsvgrp
SHA256 a160642ccf07ca3f837ed3070d3790a5bf3eada0efd95a9d4403d23a96a0b6bd
MD5 17a7fadae74b86c509a54052f953e4da
SHA1 5b0fdc187fdb5c0f66b81fc1aafca66965c8ce6b
SHA512 e5e93c7f7e8cb6cb4350309acf59432dd2a8b07c4ce542ef5661d6cd776a73b2ac778caf271a1310f1af39ed11e472748d28b041516631bbab6dd02a54b7e249
SSDEEP 12288:Yh3yc6NUIiPzMe0KbVlYwaC0rJ00T/knMrpBhw6:YNyxiPfJKwaC0rq0jAMr/+6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1 Tera HD-250Qty.exe

File Explorer

17a7fadae74b86c509a54052f953e4da_JaffaCakes118

.cab 517KB
1 Tera HD-250Qty.exe

.exe 1.3MB

17a7fadae74b86c509a54052f953e4da_JaffaCakes118

SHA256 a160642ccf07ca3f837ed3070d3790a5bf3eada0efd95a9d4403d23a96a0b6bd
MD5 17a7fadae74b86c509a54052f953e4da
SHA1 5b0fdc187fdb5c0f66b81fc1aafca66965c8ce6b
SHA512 e5e93c7f7e8cb6cb4350309acf59432dd2a8b07c4ce542ef5661d6cd776a73b2ac778caf271a1310f1af39ed11e472748d28b041516631bbab6dd02a54b7e249
SSDEEP 12288:Yh3yc6NUIiPzMe0KbVlYwaC0rJ00T/knMrpBhw6:YNyxiPfJKwaC0rq0jAMr/+6
MD5 SHA1 SHA512 SSDEEP

1 Tera HD-250Qty.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1a3ce7daf20ceb145a8b1045043e4368a6ac1b1ef13f71898faf5855be16948f
MD5 8f602b38b79c7c0d429531f91b563df8
SHA1 cac3f98aa44c6a78e441e06e86e20d2ed1fcba14
SHA512 ce21dabe8dfd066b307a69174d2c2cfa8c13d4035176e13247c057ede89cb7bf8e88a71edc22fb651462d513bfcf0e83033fa4101cbaa581bccf6e1fb201380f
SSDEEP 12288:OfvNA7CasVXrfc6edGlc3r7O6x+GR6HZmlk4GcPy9h6JHIxfNj2lQXKp07:uRakf7lczxF2ZmltPi6JHIxF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1396798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

17a7fadae74b86c509a54052f953e4da_JaffaCakes118

1 Tera HD-250Qty.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

17a7fadae74b86c509a54052f953e4da_JaffaCakes118

1 Tera HD-250Qty.exe

mscoree

dotnet