cb150e105e05cee69ee165ac0ddbb580_JaffaCakes118

General

Target
cb150e105e05cee69ee165ac0ddbb580_JaffaCakes118
Size 360KB
Sample240830-sj455a1fkr
SHA256 80046dce8235118443aa0359296e5f866259b49928782ba82d156af8d9fc301b
MD5 cb150e105e05cee69ee165ac0ddbb580
SHA1 0059b09d049cb5f18d880381e82cbefba3cae672
SHA512 713bc728765451441e752a1a26713ca372320aaf73e5a5fc3d4cdcd054488da5a2754bebdc0e0acea53b82cb753c8b8b47972a36b9a8781770fef5b77cdfa369
SSDEEP 6144:WWeYfEJRHR2GdBul3Mhw+VTaP48LRLB10DsaiRjgPdT8FPitFGS1g0s3un53tjo7:ZBEJRHRJru0+QIRAeRMPdAFPA8w3o4tM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/invoice.exe

File Explorer

cb150e105e05cee69ee165ac0ddbb580_JaffaCakes118

.7z 360KB
invoice.exe

.exe 382KB

cb150e105e05cee69ee165ac0ddbb580_JaffaCakes118

SHA256 80046dce8235118443aa0359296e5f866259b49928782ba82d156af8d9fc301b
MD5 cb150e105e05cee69ee165ac0ddbb580
SHA1 0059b09d049cb5f18d880381e82cbefba3cae672
SHA512 713bc728765451441e752a1a26713ca372320aaf73e5a5fc3d4cdcd054488da5a2754bebdc0e0acea53b82cb753c8b8b47972a36b9a8781770fef5b77cdfa369
SSDEEP 6144:WWeYfEJRHR2GdBul3Mhw+VTaP48LRLB10DsaiRjgPdT8FPitFGS1g0s3un53tjo7:ZBEJRHRJru0+QIRAeRMPdAFPA8w3o4tM
MD5 SHA1 SHA512 SSDEEP

invoice.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f85dc20c8f5191b83ebe3d2d8d7e0feb175cedbf7c9bfbb44b67a7794ceef7ba
MD5 8c7ab1ecf0dc43b1b575a4eda1f810bd
SHA1 d6a110fefe9413a7cad3b2e05a50000b194d15ff
SHA512 dbbf797ca887a7334eb00cbc5aac9d49196902f33f76b0c61079ac9e25c0281cd61ae6760c39ec68d93d8581f7f64cc4af0c9abb4ba99b2ae7e145f2db7187ca
SSDEEP 6144:+IRoC1CkzrOv/3Mhw+VkaPaLRL61pDsaiRjgPdY8FPitFG/12033Fn5Wh7rZDbBz:fotWFZ6ReeRMPdnFPA8dpHsvR+jY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

379502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

cb150e105e05cee69ee165ac0ddbb580_JaffaCakes118

invoice.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

cb150e105e05cee69ee165ac0ddbb580_JaffaCakes118

invoice.exe

mscoree

dotnet