cde4a32842894a698985654817e5a27b_JaffaCakes118

General

Target
cde4a32842894a698985654817e5a27b_JaffaCakes118
Size 337KB
Sample240901-a1bk2avdkm
SHA256 f637d170a539b7418c9da3506bc437edd21c854313fc7a2a4b03f675a63a4ae1
MD5 cde4a32842894a698985654817e5a27b
SHA1 68706620d387d17fb0abe8f8d24ae02cc8a6f8e7
SHA512 9a5eac1d976f4c56e579297f331dd1a8f6e725941cf5e382b35eab344afc05703246061b99d705f7e02011f58382524f3fc4414fce90455d74dd34f4065882c0
SSDEEP 6144:GLNkFWXpXATjiOUbGdDRyywVB9VTga7fGGASw50+p3NkOZ+:Go8pwfibG81fnxw06dkv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/teklif.exe

File Explorer

cde4a32842894a698985654817e5a27b_JaffaCakes118

.rar 337KB
teklif.exe

.exe 378KB

cde4a32842894a698985654817e5a27b_JaffaCakes118

SHA256 f637d170a539b7418c9da3506bc437edd21c854313fc7a2a4b03f675a63a4ae1
MD5 cde4a32842894a698985654817e5a27b
SHA1 68706620d387d17fb0abe8f8d24ae02cc8a6f8e7
SHA512 9a5eac1d976f4c56e579297f331dd1a8f6e725941cf5e382b35eab344afc05703246061b99d705f7e02011f58382524f3fc4414fce90455d74dd34f4065882c0
SSDEEP 6144:GLNkFWXpXATjiOUbGdDRyywVB9VTga7fGGASw50+p3NkOZ+:Go8pwfibG81fnxw06dkv
MD5 SHA1 SHA512 SSDEEP

teklif.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3b098abf608b9def35a0cabf2e548dfe01d4f575f6406770be29a25439785978
MD5 9f5f0a9318f01aba5f2e413cf55f30ee
SHA1 2893ad78ba028cd19eec0634babf210e86b2b3c5
SHA512 05695b9d5b70c758069d17386910b6c9a70a852557e7dc03f4827d923ef6680c81a24bad662e04cf3f3179d548fa4ed711355ce2b12f703b675da9f0fae58fc8
SSDEEP 6144:ryO/Zh4o9pb4K0gUjJfeanDlgy+3IvVfgupuW9hioiYnWcEzkIdUND1tUabGgxP0:rBZh4ebmjpegJ+CVfguPibk/Nxtnagx8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

392654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

cde4a32842894a698985654817e5a27b_JaffaCakes118

teklif.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

cde4a32842894a698985654817e5a27b_JaffaCakes118

teklif.exe

mscoree

dotnet