e411826dbcbcbfbcb5bc9522eee3401f_JaffaCakes118

General

Target
e411826dbcbcbfbcb5bc9522eee3401f_JaffaCakes118
Size 507KB
Sample240916-fpc8dazele
SHA256 6365674917c2e0b65ae5e5e8609e7ca2287b7ae47fba084c2514315eaacdfd5f
MD5 e411826dbcbcbfbcb5bc9522eee3401f
SHA1 de820d9ff91616dd6ffbf91c88a44e35601d216c
SHA512 09050326fbc0bc61a327a6696f8176a1f351917c1ec3daf06106fea27eab9a087f2214b54fb93a5e3b8e42cdf2546871a30be7c3f804a8a4f3535fcf05e81a20
SSDEEP 12288:OeH1L7KifEh2+jL85PpxiyOpDPffLNgL6TMC5KRaaUlNk:Os2ifEU+exiJNPXaLCXlNk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Draft-Contract - QT-ACR-VAV #2018105.scr

File Explorer

e411826dbcbcbfbcb5bc9522eee3401f_JaffaCakes118

.rar 507KB
Draft-Contract - QT-ACR-VAV #2018105.scr

.exe 593KB

e411826dbcbcbfbcb5bc9522eee3401f_JaffaCakes118

SHA256 6365674917c2e0b65ae5e5e8609e7ca2287b7ae47fba084c2514315eaacdfd5f
MD5 e411826dbcbcbfbcb5bc9522eee3401f
SHA1 de820d9ff91616dd6ffbf91c88a44e35601d216c
SHA512 09050326fbc0bc61a327a6696f8176a1f351917c1ec3daf06106fea27eab9a087f2214b54fb93a5e3b8e42cdf2546871a30be7c3f804a8a4f3535fcf05e81a20
SSDEEP 12288:OeH1L7KifEh2+jL85PpxiyOpDPffLNgL6TMC5KRaaUlNk:Os2ifEU+exiJNPXaLCXlNk
MD5 SHA1 SHA512 SSDEEP

Draft-Contract - QT-ACR-VAV #2018105.scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5f87086ab87b2eb8d0cff4b0776d062d071e5369c28ba07cea2fb8e99e833dce
MD5 88bc51002102a5856ca65303653457ee
SHA1 328f04ff3ceabd77bb45d9e6a85b3bf1472768ae
SHA512 8d9abdc8477867bcae148b3a66db8a1c61d0e0e009cc117c0a3c420ca10ee68935f7308cdcee764bc63028db506defd81afc1828121e34c92c373974ad00e95a
SSDEEP 12288:hzYnKOlBR73fB4G/Lt3MsqfZsViWpjj4JNfiTEbW5gqtcL/Eh0/UIWu/gq:lKKI7SGz5/qfej4viyWKqtcoiX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

372814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e411826dbcbcbfbcb5bc9522eee3401f_JaffaCakes118

Draft-Contract - QT-ACR-VAV #2018105.scr

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

e411826dbcbcbfbcb5bc9522eee3401f_JaffaCakes118

Draft-Contract - QT-ACR-VAV #2018105.scr

mscoree

dotnet