4c17ebca790afe22362ad8a1133104c9_JaffaCakes118

General

Target
4c17ebca790afe22362ad8a1133104c9_JaffaCakes118
Size 483KB
Sample240729-rt28vasemr
SHA256 23a99c7f93d6f3e1798f885ad3c2dd8933de3b4ba4b0f7bd4f6b1acbb0f62515
MD5 4c17ebca790afe22362ad8a1133104c9
SHA1 4199b513c8c2c6e26bad14f6d23d8d02550d1e64
SHA512 18ff46c9e4347d1e982cf69b8b21c8e8b18c25e4b8cf6139efc6e6c77d073a899b4912c29a5c7a3b088dc8406322d6dbbcc653bb7afa1bd47ea13d4bfaa72f75
SSDEEP 12288:QJRGHTt8g0YKRONXmpIaF5270RTPBrcGuzCDL183ZYNhJB:Q5LfONW6aFFtx40L1IeFB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BKG#339LN2035492.exe

File Explorer

4c17ebca790afe22362ad8a1133104c9_JaffaCakes118

.zip 483KB
BKG#339LN2035492.exe

.exe 666KB

4c17ebca790afe22362ad8a1133104c9_JaffaCakes118

SHA256 23a99c7f93d6f3e1798f885ad3c2dd8933de3b4ba4b0f7bd4f6b1acbb0f62515
MD5 4c17ebca790afe22362ad8a1133104c9
SHA1 4199b513c8c2c6e26bad14f6d23d8d02550d1e64
SHA512 18ff46c9e4347d1e982cf69b8b21c8e8b18c25e4b8cf6139efc6e6c77d073a899b4912c29a5c7a3b088dc8406322d6dbbcc653bb7afa1bd47ea13d4bfaa72f75
SSDEEP 12288:QJRGHTt8g0YKRONXmpIaF5270RTPBrcGuzCDL183ZYNhJB:Q5LfONW6aFFtx40L1IeFB
MD5 SHA1 SHA512 SSDEEP

BKG#339LN2035492.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 bcaf7b4adc919fd5aaae24902b8135e2ad6d13249e9cb784b1532b52e40449b5
MD5 64b87e9916964542d37ee247c8ebb07d
SHA1 9a1fbf2e70483196c1a8f3da38fac0307aa1d949
SHA512 1023e2e00144f56439148d0d2e58b34ea70f6d611d8edbe5a8151f20e376be00bb58f6bf912e34f86f5505d02a4816e8831b3af2e75f3d1fe2f41295b4a6b698
SSDEEP 12288:yGH7v8M0Y2twNRqVI8F5YX0TTrBD9WT5HW9PG7LWmKcPU4gjz1pD5rZ8g0UlVwu6:kPfwN0W8F799swyWhL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

688254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

4c17ebca790afe22362ad8a1133104c9_JaffaCakes118

BKG#339LN2035492.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

4c17ebca790afe22362ad8a1133104c9_JaffaCakes118

BKG#339LN2035492.exe

mscoree

dotnet