c0335dd81c1b6e683e52eacc5f006424_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c0335dd81c1b6e683e52eacc5f006424_JaffaCakes118
Size 66KB
Sample240825-hvez9sshjj
SHA256 b69d9fe24697363926682e00c3edb86aad3d91951e48d1287d73cd44bb1dff02
MD5 c0335dd81c1b6e683e52eacc5f006424
SHA1 5d4b8320abd31c2f8cc8c430b713c475bc4bd7fb
SHA512 f3dd2fafeb5df21af4f4d003e5e8cb41930d7df4d2135d5bf1958012cdf4c239f20b7d54dfcd174949f21990f99efe80af09f3563c8eca29311968ad6c8011ec
SSDEEP 1536:QVCqcc8B7KST8qtJ9QBEAR7PmvUu/WgYRc0NVqtocT:QVCO8BVto1RjUUuXYXNaT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FOTOS_DSC_JPG_09387_0000000094893i94893le934jje939333399944059948.com

File Explorer

c0335dd81c1b6e683e52eacc5f006424_JaffaCakes118

.zip 66KB
FOTOS_DSC_JPG_09387_0000000094893i94893le934jje939333399944059948.com

.exe 135KB

c0335dd81c1b6e683e52eacc5f006424_JaffaCakes118

SHA256 b69d9fe24697363926682e00c3edb86aad3d91951e48d1287d73cd44bb1dff02
MD5 c0335dd81c1b6e683e52eacc5f006424
SHA1 5d4b8320abd31c2f8cc8c430b713c475bc4bd7fb
SHA512 f3dd2fafeb5df21af4f4d003e5e8cb41930d7df4d2135d5bf1958012cdf4c239f20b7d54dfcd174949f21990f99efe80af09f3563c8eca29311968ad6c8011ec
SSDEEP 1536:QVCqcc8B7KST8qtJ9QBEAR7PmvUu/WgYRc0NVqtocT:QVCO8BVto1RjUUuXYXNaT
MD5 SHA1 SHA512 SSDEEP

FOTOS_DSC_JPG_09387_0000000094893i94893le934jje939333399944059948.com

SHA256 2b0b71a5399b8ad8780ed8ce16330aa7c12943fc739b3940280790dddd751554
MD5 11cef888cc07dd2fc45d5cf9fc780d13
SHA1 7bfb994903508256b0737ab47112c27a7fd0918e
SHA512 d27ea96e9897c05edd4a1028bf142a2c75471b1d43518df24206a68b8f4f2d187d08293dc61668f2261ea5cb85c6e41b046d53794148391a1c1c130e12d28b51
SSDEEP 3072:RvTuP7BDHdHbSs8MCMB7OmwW/lesdsdVwu0KN170tqSdG:hTuPFzdHVhNesdsdVwuHN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

112132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

106KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

12B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c0335dd81c1b6e683e52eacc5f006424_JaffaCakes118

FOTOS_DSC_JPG_09387_0000000094893i94893le934jje939333399944059948.com

generic