132fc96995a8562173b1de9cde68236d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

132fc96995a8562173b1de9cde68236d_JaffaCakes118
Size

192KB
MD5

132fc96995a8562173b1de9cde68236d
SHA1

0201509f193be30f5817b48efbc60fde734283de
SHA256

e954e622a58dcd46c610e5c54557bc197047d951ee52887b620d3202e1d67a35
SHA512

7d890415d2ef94115e7266810f0f0ee8342f7efd07528527d48a8dd93a4ebd065efcab6b6a9eeb2751b009a9ddbeb874ed212ef0087b0e99227939f7a2d31e01
SSDEEP

3072:A7cwqktKNLK2Had+F9vkbTWUoi5e2tSVZoWG0aBD9VLCP2RFlT/TAedu1vGpUVkl:AXqktKQZMkiiEsWBK9Vs2RL/E8iOWkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NFKoxpv1860.4/NF Koxp.exe
unpack001/NFKoxpv1860.4/NO dc (more fix).exe

Files

132fc96995a8562173b1de9cde68236d_JaffaCakes118
.rar
NFKoxpv1860.4/Alarm.wav
NFKoxpv1860.4/Açmadan önce Mutlaka Oku !.txt
NFKoxpv1860.4/NF Koxp.exe
.exe windows:4 windows x86 arch:x86

59d77d75088db82bb1efca5b3f5701b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord660
ord300
ord595
ord304
ord598
ord306
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord563
ord564
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord606
ord607
ord608
ord317
ord318
ord717
ProcCallEngine
ord537
ord645
ord572
ord573
ord681
ord100
ord689
ord610
ord613
ord617
ord619
ord543
ord544
ord546
ord581

Sections

.text
Size: 464KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NFKoxpv1860.4/NO dc (more fix).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59d77d75088db82bb1efca5b3f5701b5

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 464KB - Virtual size: 462KB

.data Size: - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 2KB

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 44KB - Virtual size: 41KB

.rsrc Size: 4KB - Virtual size: 888B

.reloc Size: 4KB - Virtual size: 12B

.text
Size: 464KB - Virtual size: 462KB

.data
Size: - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 44KB - Virtual size: 41KB

.rsrc
Size: 4KB - Virtual size: 888B

.reloc
Size: 4KB - Virtual size: 12B