6334e22d48264175e362eba0f4de6812_JaffaCakes118

General

Target
6334e22d48264175e362eba0f4de6812_JaffaCakes118
Size 462KB
Sample240722-phay4sxblh
SHA256 0adca1b076ec63f4af9857346b2dd8e986feb2e4e9790b3e4bbfe70495a3399d
MD5 6334e22d48264175e362eba0f4de6812
SHA1 4ae50aea624f862aa9b9c7d28f77a95854917644
SHA512 58f1b3600eb37b370e9914e87b0a180154a9bc378941172a09911f34bbacd11523fa80f8dfacbfe5efad9e3a4252ef1f8183110dc9784409c32883067dce9940
SSDEEP 12288:/uU87Xnsnlfr2S7BfyrYtyPgFpIc+BZ2Yj6rzz:AXsnlfr2SwYyoFpIFgYGrH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RYKAWEnpep6RbEt.exe

File Explorer

6334e22d48264175e362eba0f4de6812_JaffaCakes118

.rar 462KB
RYKAWEnpep6RbEt.exe

.exe 519KB

6334e22d48264175e362eba0f4de6812_JaffaCakes118

SHA256 0adca1b076ec63f4af9857346b2dd8e986feb2e4e9790b3e4bbfe70495a3399d
MD5 6334e22d48264175e362eba0f4de6812
SHA1 4ae50aea624f862aa9b9c7d28f77a95854917644
SHA512 58f1b3600eb37b370e9914e87b0a180154a9bc378941172a09911f34bbacd11523fa80f8dfacbfe5efad9e3a4252ef1f8183110dc9784409c32883067dce9940
SSDEEP 12288:/uU87Xnsnlfr2S7BfyrYtyPgFpIc+BZ2Yj6rzz:AXsnlfr2SwYyoFpIFgYGrH
MD5 SHA1 SHA512 SSDEEP

RYKAWEnpep6RbEt.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 31d2d46288e99c3c702b3302bb061c0cab77612e7ff9e5488bbd1e9099760be1
MD5 9568c0d01e18776fe76cd6e8b269666d
SHA1 8e0b1b887167f8522fb050659685471db1c56b7a
SHA512 8d80a7a4772094f0d681c9908c6bd1777afc7889db1d5a1373992203f1add4f50e8fafa0fe3b0437ca5fd985fccfc037cd1785337098d3a7140f91da859ef259
SSDEEP 12288:aMmrEMRPt1beVXvUuT0BT86aPnIpRiuLvgJMj1xrOUwwk:u/PtkUqAH5LvgijXk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

537058

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

6334e22d48264175e362eba0f4de6812_JaffaCakes118

RYKAWEnpep6RbEt.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

6334e22d48264175e362eba0f4de6812_JaffaCakes118

RYKAWEnpep6RbEt.exe

mscoree

dotnet