c5f05de51de93cda05d218a60dd34c4d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c5f05de51de93cda05d218a60dd34c4d_JaffaCakes118
Size 276KB
Sample240827-3ld2tsxbjd
SHA256 37f75faf90e40a3a976b7f9282b940ae2ca00329b52b1272679c6a4ad41a6270
MD5 c5f05de51de93cda05d218a60dd34c4d
SHA1 ff21a34f17713d06c8d786043f8c01ff1a3e5419
SHA512 a2830384ce6634b20baa0ccf97507d57c5a70072630363d844af0b5ecc377d11429e892a2726569cb64ef7127bed144da404cbfe0242c084f70ec619b450967f
SSDEEP 6144:OCI5O1r7KU59Gc5r/fx1tpATl3DtlqtusQVjsAzpHW3cf6TucjjBbuM:O/A9L5Dx1wTtHfnpHtSTugBiM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHl Delivery reciept.exe

File Explorer

c5f05de51de93cda05d218a60dd34c4d_JaffaCakes118

.rar 276KB
DHl Delivery reciept.exe

.exe 624KB

c5f05de51de93cda05d218a60dd34c4d_JaffaCakes118

SHA256 37f75faf90e40a3a976b7f9282b940ae2ca00329b52b1272679c6a4ad41a6270
MD5 c5f05de51de93cda05d218a60dd34c4d
SHA1 ff21a34f17713d06c8d786043f8c01ff1a3e5419
SHA512 a2830384ce6634b20baa0ccf97507d57c5a70072630363d844af0b5ecc377d11429e892a2726569cb64ef7127bed144da404cbfe0242c084f70ec619b450967f
SSDEEP 6144:OCI5O1r7KU59Gc5r/fx1tpATl3DtlqtusQVjsAzpHW3cf6TucjjBbuM:O/A9L5Dx1wTtHfnpHtSTugBiM
MD5 SHA1 SHA512 SSDEEP

DHl Delivery reciept.exe

SHA256 8243c8a72e7a2021b4d956f5dafc19ded0162e9eb99f158f8da83660ea9368b5
MD5 2cfdae4ee4082225277048a7735c1561
SHA1 da23e01a6e02dddfcd7a52b3822c28c5b16aafc2
SHA512 764946c9a353ab7b4a71376efbfe143deaedfb753b6cf98489761b6fab442a79d07ef9b2e030f93f9bd9a3f7be7a65695e61f015da093dccfed8278be87df14a
SSDEEP 12288:9+p7p8KESESHe4/gD6WDSqWl/LDGTGM5irKnPkVB:UtRES4DBSq2KG2bPkVB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

500108

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

484KB

Virtual Size

484KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

93KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c5f05de51de93cda05d218a60dd34c4d_JaffaCakes118

DHl Delivery reciept.exe

generic