fe1a21fd2f2c7385f70ed907ea985707_JaffaCakes118

General

Target
fe1a21fd2f2c7385f70ed907ea985707_JaffaCakes118
Size 110KB
Sample240929-jxxtjavgrr
SHA256 f338a70e47e02ffe040eb7d23a3d15ecdb6252412f786c95bad31c0c51f7d2a8
MD5 fe1a21fd2f2c7385f70ed907ea985707
SHA1 30abfcfb656f8dfa304aa40c328bd879e532483a
SHA512 6f55edda96d10d63eba9b1c0ca03f02f74af555e0731fe7b03e5b534ffa5f14654076b5e69bff775281569eef01874dd300c0e9943129617307688c0112bae48
SSDEEP 3072:/i51oD+WU38f5wrEI1cAXBgQRCh+dawWh4eIqfV:6/ojO83I1UEChu1WCejt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sparrows.exe

File Explorer

fe1a21fd2f2c7385f70ed907ea985707_JaffaCakes118

.zip 110KB
sparrows.exe

.exe 208KB

fe1a21fd2f2c7385f70ed907ea985707_JaffaCakes118

SHA256 f338a70e47e02ffe040eb7d23a3d15ecdb6252412f786c95bad31c0c51f7d2a8
MD5 fe1a21fd2f2c7385f70ed907ea985707
SHA1 30abfcfb656f8dfa304aa40c328bd879e532483a
SHA512 6f55edda96d10d63eba9b1c0ca03f02f74af555e0731fe7b03e5b534ffa5f14654076b5e69bff775281569eef01874dd300c0e9943129617307688c0112bae48
SSDEEP 3072:/i51oD+WU38f5wrEI1cAXBgQRCh+dawWh4eIqfV:6/ojO83I1UEChu1WCejt
MD5 SHA1 SHA512 SSDEEP

sparrows.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2e27bf386a514320dc15a2cbce4967a1cb7602dbc2e90865dc19d422776e8063
MD5 0b7621da72f30a6ce13f51de02bfd098
SHA1 68c7dc41b82713067c4fde4455339d84e2c39e66
SHA512 cc9c208c1bfca3ccb6ba6466072414787b9105d13e90d7dcfea0d61de394751c9d9c5f0d9f4d385c98240c188dcd67044d22a3033afc05e5970f2df43bd3ea65
SSDEEP 3072:bNFviD+WU38n5wrEY13Mz1eGbbrdgMTXOM7B+p:JspO8vY13FGXxge4p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

117358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

fe1a21fd2f2c7385f70ed907ea985707_JaffaCakes118

sparrows.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

fe1a21fd2f2c7385f70ed907ea985707_JaffaCakes118

sparrows.exe

mscoree

dotnet