6638d5300b1a25f07aa08472d8b537f8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
6638d5300b1a25f07aa08472d8b537f8_JaffaCakes118
Size 1.2MB
Sample240729-24dncazcnf
SHA256 8dd56c5aa40f91ae736c97689bab5066c2fd86f5a3cd181851579dcb5b42ed50
MD5 6638d5300b1a25f07aa08472d8b537f8
SHA1 84ce1185dc19e03530e71eb0f37200d2e35718e2
SHA512 53cbafc5ebeacc311a4355fcd5b4bf5d84f533efad396643b02a30a671219b86b824b94e4ed83c33016ca44d4685138d4d46bad5682ffd741e6bd2a30eb233cc
SSDEEP 12288:8BRcXM3Uc4yEUdqhfwxgcQYRpS3hF6vqA+T7C/9qOo:QUBcxqhffV2vDEe/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Packing Lists.exe

File Explorer

6638d5300b1a25f07aa08472d8b537f8_JaffaCakes118

.iso 1.2MB
out.iso

.iso 1.2MB
Packing Lists.exe

.exe 580KB

6638d5300b1a25f07aa08472d8b537f8_JaffaCakes118

SHA256 8dd56c5aa40f91ae736c97689bab5066c2fd86f5a3cd181851579dcb5b42ed50
MD5 6638d5300b1a25f07aa08472d8b537f8
SHA1 84ce1185dc19e03530e71eb0f37200d2e35718e2
SHA512 53cbafc5ebeacc311a4355fcd5b4bf5d84f533efad396643b02a30a671219b86b824b94e4ed83c33016ca44d4685138d4d46bad5682ffd741e6bd2a30eb233cc
SSDEEP 12288:8BRcXM3Uc4yEUdqhfwxgcQYRpS3hF6vqA+T7C/9qOo:QUBcxqhffV2vDEe/
MD5 SHA1 SHA512 SSDEEP

Packing Lists.exe

SHA256 b3632e0dd5c285e714fa880ab59e27fbc7678b220dd19661587b4501f9df51f6
MD5 1b0d830a35b27bf1d8921df876d72c20
SHA1 ef5c6defb67e3a73f7fb36668e8cd6901d72bab8
SHA512 a7af313f3e547645e84818e3506c164ac3935f0980c57cdcbbf8d810e11726821efc2e1a9a198c07ba894029f6a3ef583c955d8d2ac41857763ba7effb8c1cc3
SSDEEP 12288:MBRcXM3Uc4yEUdqhfwxgcQYRpS3hF6vqA+T7C/9qOo6:AUBcxqhffV2vDEe/1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

384432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

371KB

Virtual Size

371KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

135KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6638d5300b1a25f07aa08472d8b537f8_JaffaCakes118

out.iso

Packing Lists.exe

generic