5a772ff9d7d8260b4d5c10df9cce7463_JaffaCakes118

General

Target
5a772ff9d7d8260b4d5c10df9cce7463_JaffaCakes118
Size 57KB
Sample240719-e4ejbawcnb
SHA256 c9f23a967c2f7f4d6f467dd1d55d6b01183d4aa7339a7a3c1f22a0d509d6c3ad
MD5 5a772ff9d7d8260b4d5c10df9cce7463
SHA1 06f4d0cd20853cd9513a56f39cd5576aad37f948
SHA512 bd37c89fa355d690562cb7c49b1ad4fb1afa567450cf1bd25e298920fc7f424cee796c4490b27ca84a5fa6c1f092dfb1c9d0c79f7a46322c410a028a6e68bb91
SSDEEP 1536:MiYZGp9oUbkyEx29vNG01Kpt/SKNqyl/Y9F:MiYAbnbkyjJ03qylwn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/IMG_24102011_150_JPG_0000000094893i94893le934jje939333399944059948.cpl

File Explorer

5a772ff9d7d8260b4d5c10df9cce7463_JaffaCakes118

.zip 57KB
IMG_24102011_150_JPG_0000000094893i94893le934jje939333399944059948.cpl

.dll 111KB

5a772ff9d7d8260b4d5c10df9cce7463_JaffaCakes118

SHA256 c9f23a967c2f7f4d6f467dd1d55d6b01183d4aa7339a7a3c1f22a0d509d6c3ad
MD5 5a772ff9d7d8260b4d5c10df9cce7463
SHA1 06f4d0cd20853cd9513a56f39cd5576aad37f948
SHA512 bd37c89fa355d690562cb7c49b1ad4fb1afa567450cf1bd25e298920fc7f424cee796c4490b27ca84a5fa6c1f092dfb1c9d0c79f7a46322c410a028a6e68bb91
SSDEEP 1536:MiYZGp9oUbkyEx29vNG01Kpt/SKNqyl/Y9F:MiYAbnbkyjJ03qylwn
MD5 SHA1 SHA512 SSDEEP

IMG_24102011_150_JPG_0000000094893i94893le934jje939333399944059948.cpl

SHA256 e959826e09a3d59ed01c7b829b13584e9de359e4e1563b446f7c515f4aafbcc6
MD5 ebd34462ceec86a6e1eff44e574df9d1
SHA1 7e50bb775b1868a4e4612daad4ae464fea3c9fb5
SHA512 08facf4549efcb28da871b1b0ce50cdcbe10066bc7f6242ad2ed1723eeeae4093c5fac5473d9ccd6a0bb742fe08ed52c5765f463acd2eb9838542e9ca4d81087
SSDEEP 3072:T3E6JryyQkNc15TgqHzbh+OOIimIdsYVwuCvJ2zlk9:T3RJODmcE5vmIdsYVwu
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

98668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5a772ff9d7d8260b4d5c10df9cce7463_JaffaCakes118

IMG_24102011_150_JPG_0000000094893i94893le934jje939333399944059948.cpl

generic