6bedcbadfbf022044087051b507e5723_JaffaCakes118

General

Target
6bedcbadfbf022044087051b507e5723_JaffaCakes118
Size 193KB
Sample240730-be3m3avapa
SHA256 da3baccf846d83fcd3741356aae3c5e9bed59f6217a13a9c900e2a20330ac80e
MD5 6bedcbadfbf022044087051b507e5723
SHA1 4fd9ff69d651c3c9ef42a756512032d6ae9f288c
SHA512 e02b484222b9a721e8c8340874ae8b61a80d026138af3104327622b71e176d029a6a74e3502d20dd7c8d7f3124a6535f52be105ffe21b1a7d83bbb81907c91ed
SSDEEP 6144:MBKqa8XGJBD07YgoIKO7encriGhTgw6T4w2sXPk0:+XkDoYgPd08TOTEx0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/win32.exe

File Explorer

6bedcbadfbf022044087051b507e5723_JaffaCakes118

.zip 193KB
win32.exe

.exe 282KB

6bedcbadfbf022044087051b507e5723_JaffaCakes118

SHA256 da3baccf846d83fcd3741356aae3c5e9bed59f6217a13a9c900e2a20330ac80e
MD5 6bedcbadfbf022044087051b507e5723
SHA1 4fd9ff69d651c3c9ef42a756512032d6ae9f288c
SHA512 e02b484222b9a721e8c8340874ae8b61a80d026138af3104327622b71e176d029a6a74e3502d20dd7c8d7f3124a6535f52be105ffe21b1a7d83bbb81907c91ed
SSDEEP 6144:MBKqa8XGJBD07YgoIKO7encriGhTgw6T4w2sXPk0:+XkDoYgPd08TOTEx0
MD5 SHA1 SHA512 SSDEEP

win32.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6952271ad4021a7b5b13b7a6a4375de48750e9f5dc1bbde69eb81c4c5b6bf550
MD5 49e57c841d29e789570d5636b8e03ed4
SHA1 a4968b3380d724c04824de6943d7dbf86c59bf43
SHA512 d540622a31546b92a52f4b67ef301a96d30e88f8b37b16ec56ac773ca32fc9236f0621c0d3ab02851fbcb4455cecfda30bf15e4f85dd1a8ab35014bbf6efc4de
SSDEEP 6144:1fc7SBG7i+n3HAApBz+HVlsKfencriGhdgw6B4w2sXac:KusPn3Vksp8dOBEW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

293910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

6bedcbadfbf022044087051b507e5723_JaffaCakes118

win32.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

6bedcbadfbf022044087051b507e5723_JaffaCakes118

win32.exe

mscoree

dotnet