fb67f316a5e4d90f45a8186c83f492a8_JaffaCakes118

General

Target
fb67f316a5e4d90f45a8186c83f492a8_JaffaCakes118
Size 550KB
Sample240928-dxq34avanp
SHA256 dada920f3fa567ecbe4781a9e7e4237694e3b21ecc14ac0503c7a528aca1a78c
MD5 fb67f316a5e4d90f45a8186c83f492a8
SHA1 45443a972477af04208240964671c695cf5a2bb7
SHA512 24d120d305bfd91971577fa290cdd21bc9e0e1e1873137e40509e83c138c8eb99a5da7b8f55efd95d31bcd804aa4d7464e39a3d9ed5ded8c80198588754e637a
SSDEEP 12288:Gip+GGgWfc9hm4jL5AcIJFYyEeNPUPDPouLuGf:Gip+dgzzmKucJyHODAuKGf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RETURNED PAYMENT.exe

File Explorer

fb67f316a5e4d90f45a8186c83f492a8_JaffaCakes118

.rar 550KB
RETURNED PAYMENT.exe

.exe 866KB

fb67f316a5e4d90f45a8186c83f492a8_JaffaCakes118

SHA256 dada920f3fa567ecbe4781a9e7e4237694e3b21ecc14ac0503c7a528aca1a78c
MD5 fb67f316a5e4d90f45a8186c83f492a8
SHA1 45443a972477af04208240964671c695cf5a2bb7
SHA512 24d120d305bfd91971577fa290cdd21bc9e0e1e1873137e40509e83c138c8eb99a5da7b8f55efd95d31bcd804aa4d7464e39a3d9ed5ded8c80198588754e637a
SSDEEP 12288:Gip+GGgWfc9hm4jL5AcIJFYyEeNPUPDPouLuGf:Gip+dgzzmKucJyHODAuKGf
MD5 SHA1 SHA512 SSDEEP

RETURNED PAYMENT.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 34d3c312a8cb63c3e7be469f70ec3270b66c7d47cb38ed63a87e27ac1fd9c440
MD5 0e8d35f26c96b113928840357f4788d5
SHA1 5033be8a563df919390cfa01e556f671068c9001
SHA512 998a9a570298332ae09d03f6867bc1b4546da6437b33b252ccbd26ec8a2abd16dc09ac7a933900d3233e71e710ba4bd2c153a789b3eb91231a750518ce63a565
SSDEEP 12288:SgVK7c/UrwH77vvgdLZnHVY5peqDyo+TxG2sxVMbmf9y5o4:SizbjveZnHVK/Dyo+TY4blP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

789742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

fb67f316a5e4d90f45a8186c83f492a8_JaffaCakes118

RETURNED PAYMENT.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

fb67f316a5e4d90f45a8186c83f492a8_JaffaCakes118

RETURNED PAYMENT.exe

mscoree

dotnet