a27bfd81b60c5b7ab68b3e1de7d1d6a4_JaffaCakes118

General

Target
a27bfd81b60c5b7ab68b3e1de7d1d6a4_JaffaCakes118
Size 1.0MB
Sample240817-pd81cavcrc
SHA256 257f7f24ac035ba6f49a63679e175576224dc72a6bfff27e3aff99a9e0d40c61
MD5 a27bfd81b60c5b7ab68b3e1de7d1d6a4
SHA1 55b9a726e1074d7f586a750123abcd3b696d75cc
SHA512 fb6f05ab54e5f068e04d07fb4b5520d8a9db60fd6e7be1d5e5c44ff31a0cd4450944a8a3f85554cdff637a78b07df861e161b6cf3c687f038d0927f531913777
SSDEEP 24576:wQN60LA3NE9tKT17UJKW/SYv6vxHBaVGyBknm:wQNUNyO16uvqkm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a27bfd81b60c5b7ab68b3e1de7d1d6a4_JaffaCakes118

File Explorer

a27bfd81b60c5b7ab68b3e1de7d1d6a4_JaffaCakes118

.dll 1.0MB

a27bfd81b60c5b7ab68b3e1de7d1d6a4_JaffaCakes118

SHA256 257f7f24ac035ba6f49a63679e175576224dc72a6bfff27e3aff99a9e0d40c61
MD5 a27bfd81b60c5b7ab68b3e1de7d1d6a4
SHA1 55b9a726e1074d7f586a750123abcd3b696d75cc
SHA512 fb6f05ab54e5f068e04d07fb4b5520d8a9db60fd6e7be1d5e5c44ff31a0cd4450944a8a3f85554cdff637a78b07df861e161b6cf3c687f038d0927f531913777
SSDEEP 24576:wQN60LA3NE9tKT17UJKW/SYv6vxHBaVGyBknm:wQNUNyO16uvqkm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

902352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

877KB

Virtual Size

877KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

67B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a27bfd81b60c5b7ab68b3e1de7d1d6a4_JaffaCakes118

generic