89c1e778d9e34d1f45f97b166f66b71a_JaffaCakes118

General

Target
89c1e778d9e34d1f45f97b166f66b71a_JaffaCakes118
Size 520KB
Sample240811-kw6wgsshjq
SHA256 77368aa36ee6f9a024aaeaa7bcb5d2fba81a9ccd9927a2388ef4082570715b0b
MD5 89c1e778d9e34d1f45f97b166f66b71a
SHA1 04bf5272dff5fba921d9b965ee5f7a06fe5eb4fe
SHA512 0e3b8f44e257138cdf3f66b0d6a15f649d04d96940dcf75d4a9cf2a6e52f25ffd7147f7916a1b3ac2e2f63ed29bdc91a469bda6af9a6c263be1f386b18757122
SSDEEP 384:ppdNjtU2O+9tIpYOruyQD5ol4rZpTMFsadh3KBuzbv1228SS:ppdHzC+D5o21GNh3Fbv12fP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89c1e778d9e34d1f45f97b166f66b71a_JaffaCakes118

File Explorer

89c1e778d9e34d1f45f97b166f66b71a_JaffaCakes118

.dll 520KB

89c1e778d9e34d1f45f97b166f66b71a_JaffaCakes118

SHA256 77368aa36ee6f9a024aaeaa7bcb5d2fba81a9ccd9927a2388ef4082570715b0b
MD5 89c1e778d9e34d1f45f97b166f66b71a
SHA1 04bf5272dff5fba921d9b965ee5f7a06fe5eb4fe
SHA512 0e3b8f44e257138cdf3f66b0d6a15f649d04d96940dcf75d4a9cf2a6e52f25ffd7147f7916a1b3ac2e2f63ed29bdc91a469bda6af9a6c263be1f386b18757122
SSDEEP 384:ppdNjtU2O+9tIpYOruyQD5ol4rZpTMFsadh3KBuzbv1228SS:ppdHzC+D5o21GNh3Fbv12fP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16388

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

89c1e778d9e34d1f45f97b166f66b71a_JaffaCakes118

generic