General

  • Target
    3a9503ce79a0ac3b6f2f38163d55554d_JaffaCakes118
  • Size 1.3MB
  • Sample240711-y4ec4avdma
  • SHA256 9941fd97327d54a18209d0bb1f36992a18a3809aa8d163e7fe80193a4348610a
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

File Explorer

  • 3a9503ce79a0ac3b6f2f38163d55554d_JaffaCakes118
    .dll 1.3MB

3a9503ce79a0ac3b6f2f38163d55554d_JaffaCakes118

  • IMPHASH 671e1ea198b62481577ab1f6d4033050
  • SHA256 9941fd97327d54a18209d0bb1f36992a18a3809aa8d163e7fe80193a4348610a
  • MD5 SHA1 SHA512 SSDEEP
  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

PE Signature issue

Digest
ce:82:b2:c1:66:fa:30:8d:fa:75:7d:0d:7f:4f:66:8a:47:4a:97:c5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Runewaker Entertainment,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Runewaker Entertainment,L=Taichung,ST=Taiwan,C=TW
Chains

Jun 17, 2014

Minor OS version
2
Major OS version
5
Entry point
1524779
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths