45a379f3636c40b781804d68fe56a14d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
45a379f3636c40b781804d68fe56a14d_JaffaCakes118
Size 508KB
Sample240729-pap33asame
SHA256 60af4d13b9f45c65f7d5c1855564e84b414d3395b54e1ab9c7699251fd6ad36e
MD5 45a379f3636c40b781804d68fe56a14d
SHA1 b5923ff9121c5fbbb5a56c6ce0e9b16f62e356d4
SHA512 e288ce1eb5884b826abb11ee2d8b812040068df391642504b448a37c50491d5ab691823e0a17986265c0a66de9214d92c75c1c833a776c64c88c686bb9655334
SSDEEP 12288:YQIyju7o/m26A0B2C5fieHW/KLpHhql/fWLygq90:aOu7E67UC5frDHc/fx0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Timsistem_Product_Specifications - 2020.07.17.exe

File Explorer

45a379f3636c40b781804d68fe56a14d_JaffaCakes118

.zip 508KB
Timsistem_Product_Specifications - 2020.07.17.exe

.exe 759KB

45a379f3636c40b781804d68fe56a14d_JaffaCakes118

SHA256 60af4d13b9f45c65f7d5c1855564e84b414d3395b54e1ab9c7699251fd6ad36e
MD5 45a379f3636c40b781804d68fe56a14d
SHA1 b5923ff9121c5fbbb5a56c6ce0e9b16f62e356d4
SHA512 e288ce1eb5884b826abb11ee2d8b812040068df391642504b448a37c50491d5ab691823e0a17986265c0a66de9214d92c75c1c833a776c64c88c686bb9655334
SSDEEP 12288:YQIyju7o/m26A0B2C5fieHW/KLpHhql/fWLygq90:aOu7E67UC5frDHc/fx0
MD5 SHA1 SHA512 SSDEEP

Timsistem_Product_Specifications - 2020.07.17.exe

SHA256 cf09bc45a7101670e26f9468d7425a42880ee539626b1653216c4ceb4a89b7fb
MD5 6998368a7e9f5e063f5b5a0090112545
SHA1 c7659c9e1b683d7044267b6960a30ca6473ca945
SHA512 d5044c8d53cfa2483b9f923fd2eca3f9c50ff97712ac36a2d33792ef7fc5ee9cbf504128d9a280130668cadb49b132f6de278fdbbc58b18ee07b5ee0e3bc210e
SSDEEP 12288:o+eY4CTOV6w0mZP3fSyTF+4ISgm3Jz7VQrCCD5fwWRbvDtcBUaw47kUKuXLrK0:nN4P4w06fZF+OgkOf37aBUN5uXb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

430516

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

416KB

Virtual Size

416KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

301KB

Virtual Size

300KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

45a379f3636c40b781804d68fe56a14d_JaffaCakes118

Timsistem_Product_Specifications - 2020.07.17.exe

generic