025307069088cfb359731f34f3af68db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
025307069088cfb359731f34f3af68db_JaffaCakes118
Size 1.9MB
Sample240930-vbraeazbkd
SHA256 355c9f31d4f4cf6242a8bedf18d47dbcf2cf863abbe83acd6c8beb9e89e3aad2
MD5 025307069088cfb359731f34f3af68db
SHA1 fec66a9c9c56c05c0550cb81b0d3169a37210d5f
SHA512 17692dbe5dd65ffb863ec1dfbf7fd7070b389c3607dd995b38bb7ea87f45fce1d74ceaf87348aa1320bc0581ac9ebc7cf5a3bd42ee852a9751abb9dd336d2219
SSDEEP 49152:n0Fu06MypMVPMB0MX6l7FhDft1BVe9YIJJOHa3q47s+Uu:n04GVPM0w87LDNVe903cs+3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
025307069088cfb359731f34f3af68db_JaffaCakes118

File Explorer

025307069088cfb359731f34f3af68db_JaffaCakes118

.exe 1.9MB

025307069088cfb359731f34f3af68db_JaffaCakes118

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 355c9f31d4f4cf6242a8bedf18d47dbcf2cf863abbe83acd6c8beb9e89e3aad2
MD5 025307069088cfb359731f34f3af68db
SHA1 fec66a9c9c56c05c0550cb81b0d3169a37210d5f
SHA512 17692dbe5dd65ffb863ec1dfbf7fd7070b389c3607dd995b38bb7ea87f45fce1d74ceaf87348aa1320bc0581ac9ebc7cf5a3bd42ee852a9751abb9dd336d2219
SSDEEP 49152:n0Fu06MypMVPMB0MX6l7FhDft1BVe9YIJJOHa3q47s+Uu:n04GVPM0w87LDNVe903cs+3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5046272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

40KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

888B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1024B

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

wmnwzhln

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

yolrvbid

Size

2KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

9KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

025307069088cfb359731f34f3af68db_JaffaCakes118

kernel32

generic