zhen | 02ab2317ece02452d24a5ebb9bafd4bf_JaffaCakes118

General

Target
02ab2317ece02452d24a5ebb9bafd4bf_JaffaCakes118
Size 6.1MB
Sample240727-3njp4ayblf
SHA256 cd6f8109c5670f8cb48efdc4535da226ee5786553f342456680120e38f0ae3f3
MD5 02ab2317ece02452d24a5ebb9bafd4bf
SHA1 95d711a110c7ac8a87cd440c4cef29719ff378c4
SHA512 62f18404f81adad303a908813585a02bdb458772700dabdc549184ffd440a132435c4b0aa79231df0c4383e8065426f7312a412c0e59bd3e072ff9a96dbda667
SSDEEP 98304:T+u4A8fZvfbiEYacrRyyVyGHAeBSut+aFNnLlPLeqNZ8hY/LKbxabdDkEduupRlY:TfavVYaolX+aFFLlPKQ8hY/RkQWslX+
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

zhen

Zhen Executable 1 IoCs

resource	yara_rule
sample	family_zhen

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02ab2317ece02452d24a5ebb9bafd4bf_JaffaCakes118

SHA256 cd6f8109c5670f8cb48efdc4535da226ee5786553f342456680120e38f0ae3f3
MD5 02ab2317ece02452d24a5ebb9bafd4bf
SHA1 95d711a110c7ac8a87cd440c4cef29719ff378c4
SHA512 62f18404f81adad303a908813585a02bdb458772700dabdc549184ffd440a132435c4b0aa79231df0c4383e8065426f7312a412c0e59bd3e072ff9a96dbda667
SSDEEP 98304:T+u4A8fZvfbiEYacrRyyVyGHAeBSut+aFNnLlPLeqNZ8hY/LKbxabdDkEduupRlY:TfavVYaolX+aFFLlPKQ8hY/RkQWslX+
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

12098768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths