578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118
Size 347KB
Sample240729-wplshssflj
SHA256 a28c5dec9756b7671b1d086b3798ec49653a9425bd6bca936fa85aa01476f25f
MD5 578241edf930d5d5ea9e4473a1d7a281
SHA1 564478e5272310c6b23e04c2aca02541aaf7d0ca
SHA512 5386a17b37ee11ce73a6873318279e3f3019a923cfb3315e0cbdfaa71e00238519922bb49233a06a8f839896d8b076c0472730344b9b1fd5bfad626cd16a2dc7
SSDEEP 6144:CCCaNjoI94Zq6HxY4cTmQt4E+d/0xwOrlE0nn7e9I5o3p6t5KlOUyPMB9KS/Rw7+:cAd4jHxStz+d/0xbrpn7e9Iu6tyQMdJ/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INQUIRY.exe

File Explorer

578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118

.rar 347KB
INQUIRY.exe

.exe 776KB

578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118

SHA256 a28c5dec9756b7671b1d086b3798ec49653a9425bd6bca936fa85aa01476f25f
MD5 578241edf930d5d5ea9e4473a1d7a281
SHA1 564478e5272310c6b23e04c2aca02541aaf7d0ca
SHA512 5386a17b37ee11ce73a6873318279e3f3019a923cfb3315e0cbdfaa71e00238519922bb49233a06a8f839896d8b076c0472730344b9b1fd5bfad626cd16a2dc7
SSDEEP 6144:CCCaNjoI94Zq6HxY4cTmQt4E+d/0xwOrlE0nn7e9I5o3p6t5KlOUyPMB9KS/Rw7+:cAd4jHxStz+d/0xbrpn7e9Iu6tyQMdJ/
MD5 SHA1 SHA512 SSDEEP

INQUIRY.exe

SHA256 20d228902e80950b04fb2ef5964593b0e9da70ceb731df60a4d77f8a7a9cfb28
MD5 3edcde90e032a7b124a5677ae7d4225c
SHA1 02eed496be9f11617d1ae15f65a5578e38a92734
SHA512 6f9e0c443722188451a49d7364d333bb554fe03fdb1f3b87776088e389f28c12a87d82d68933f7927bfaebb45c00df84d35fb8da52860cf2a30ae2d3153ba3d4
SSDEEP 12288:ijbBOJuk1EYLwotbltPbjn1gFi7Vik4BprQR2nY5Q1J:Rn7LPXVui7ViFyOP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

499408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

484KB

Virtual Size

483KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

139KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118

INQUIRY.exe

generic