47cf31e48da66240eddec0dcf76a1c0f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
47cf31e48da66240eddec0dcf76a1c0f_JaffaCakes118
Size 528KB
Sample240715-cslgdawdng
SHA256 883f50b74e08b609ad4434bddd4f7dcb0fda896f18f3e03c4e231a8d2ed5293b
MD5 47cf31e48da66240eddec0dcf76a1c0f
SHA1 f54a23536578423583258dac1c8c7f9f13444638
SHA512 bee5290c244ca502b03884771fd278dbd8e816cf0034adcbb89f2245d2bb8742429ee5b3ee11a7a259d29db943ab262cc22cca38632bb90a77b1744ad7b288c6
SSDEEP 12288:vXWADOv3KE78q+C+SAHdMwxFOh0D36BD1/tMtaWvE9h8Fv/9/4OFo2b:v/gaE7OCCqwx0hy36pstaWvPFp4E
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47cf31e48da66240eddec0dcf76a1c0f_JaffaCakes118

File Explorer

47cf31e48da66240eddec0dcf76a1c0f_JaffaCakes118

.exe 528KB

47cf31e48da66240eddec0dcf76a1c0f_JaffaCakes118

IMPHASH 89ed642cf5731f2b4306595a3b8cd030
SHA256 883f50b74e08b609ad4434bddd4f7dcb0fda896f18f3e03c4e231a8d2ed5293b
MD5 47cf31e48da66240eddec0dcf76a1c0f
SHA1 f54a23536578423583258dac1c8c7f9f13444638
SHA512 bee5290c244ca502b03884771fd278dbd8e816cf0034adcbb89f2245d2bb8742429ee5b3ee11a7a259d29db943ab262cc22cca38632bb90a77b1744ad7b288c6
SSDEEP 12288:vXWADOv3KE78q+C+SAHdMwxFOh0D36BD1/tMtaWvE9h8Fv/9/4OFo2b:v/gaE7OCCqwx0hy36pstaWvPFp4E
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1043182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Themid0

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

455KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Themid1

Size

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Themid2

Size

526KB

Virtual Size

525KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

47cf31e48da66240eddec0dcf76a1c0f_JaffaCakes118

kernel32

user32

advapi32

shell32

generic