02348c5f076396ffbf2becff5b678e68_JaffaCakes118

General

Target
02348c5f076396ffbf2becff5b678e68_JaffaCakes118
Size 1.0MB
Sample240930-tmdb9ayape
SHA256 39e47e936df55ba747669be113afa37d6af70be352d9668019c1dcfaea5f7495
MD5 02348c5f076396ffbf2becff5b678e68
SHA1 f38f7dce6605c43be243a0e1a7194d4b1b9b3646
SHA512 6808f77c95b97db55d23e1d97f3b08cbc52a150f43795ef6a7c538b296e9fc5d6ff63e105d9b2a7b9238b585ab56ca94f25f2220569cd4fdac436d5505d961b2
SSDEEP 24576:gLDbbg8FKIMzhafJs9axDu3OpUE2W2uKpGa2Zjpk:KHbg8fMMfJpOVMlKB2U
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

02348c5f076396ffbf2becff5b678e68_JaffaCakes118

.exe 1.0MB

02348c5f076396ffbf2becff5b678e68_JaffaCakes118

IMPHASH fa61a82476fadfdb2270a4997bcd3706
SHA256 39e47e936df55ba747669be113afa37d6af70be352d9668019c1dcfaea5f7495
MD5 02348c5f076396ffbf2becff5b678e68
SHA1 f38f7dce6605c43be243a0e1a7194d4b1b9b3646
SHA512 6808f77c95b97db55d23e1d97f3b08cbc52a150f43795ef6a7c538b296e9fc5d6ff63e105d9b2a7b9238b585ab56ca94f25f2220569cd4fdac436d5505d961b2
SSDEEP 24576:gLDbbg8FKIMzhafJs9axDu3OpUE2W2uKpGa2Zjpk:KHbg8fMMfJpOVMlKB2U
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

5f:55:7a:86:bb:a4:b6:30:8f:e6:02:2f:3d:d3:0c:13:93:14:30:dc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Stanislav Kabin,O=Stanislav Kabin,C=RU,1.2.840.113549.1.9.1=#0c1b5374616e69736c61762e4b6162696e40686f746d61696c2e636f6d

Chains

Sep 30, 2024

Minor OS version

1

Major OS version

5

Entry point

844593

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

845KB

Virtual Size

844KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

55KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

02348c5f076396ffbf2becff5b678e68_JaffaCakes118

PE Signature issue

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

02348c5f076396ffbf2becff5b678e68_JaffaCakes118

PE Signature issue

kernel32

generic