e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118

General

Target
e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118
Size 122KB
Sample240915-kmfypsvdph
SHA256 237b6f573398fb8ef734d75f984eaf96b8320aec860697fb17a75d9f33447d4d
MD5 e21a1321e8dc90e2cbfcebea48458f55
SHA1 2d0bd27f423c01f5e6f12d72c65f130dadd872b8
SHA512 365bef6e1ab899f35fb5367f9114edf500a1ea5ea44fc1403081f52ab4e71a1e4f61edf31fde5ed200bfce62b29dfce719cf5ba3ac4ca1161893ab3809573f0c
SSDEEP 1536:f+Uo88pEwXQYU36N8cnfP4+Dc6fmjkbnMMziZ4BrRwM2DQ8Im:mUoTE8636N8co6fm4A43BriQ8Im
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118

File Explorer

e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118

.exe 122KB

e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118

IMPHASH af655c81779e61e569acc7abe8aeaeb3
SHA256 237b6f573398fb8ef734d75f984eaf96b8320aec860697fb17a75d9f33447d4d
MD5 e21a1321e8dc90e2cbfcebea48458f55
SHA1 2d0bd27f423c01f5e6f12d72c65f130dadd872b8
SHA512 365bef6e1ab899f35fb5367f9114edf500a1ea5ea44fc1403081f52ab4e71a1e4f61edf31fde5ed200bfce62b29dfce719cf5ba3ac4ca1161893ab3809573f0c
SSDEEP 1536:f+Uo88pEwXQYU36N8cnfP4+Dc6fmjkbnMMziZ4BrRwM2DQ8Im:mUoTE8636N8co6fm4A43BriQ8Im
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

88208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

86KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

186KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118

kernel32

user32

generic