16075f66086791c2d8e20e6bbab797c8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
16075f66086791c2d8e20e6bbab797c8_JaffaCakes118
Size 139KB
Sample241005-eag3catdjq
SHA256 5fe59063e636d4d14ed69601dead727a2dc0909b49e5d56440f82c415d2754be
MD5 16075f66086791c2d8e20e6bbab797c8
SHA1 a063b6f66dda16518afcdee4dd22ee1a9803f9f7
SHA512 d210d32b69807401c2f1f7e33ff77c63c29b71e9a27e2c9118c0ccc5d94ecda63b1dadbf8b7ce5f12d3c04bbe8f5024813642a0979703c6e143d584e4a31ad28
SSDEEP 1536:8fjj+VDJ2Y1XJ2xH7Z3CPRs/sYuQrR7qKFFdr8uveDgK2FgGdFXCFnsUo6Ge/ASk:EjjSMY1XoRCP+/33rReWIVZvFsU5Jaf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16075f66086791c2d8e20e6bbab797c8_JaffaCakes118

File Explorer

16075f66086791c2d8e20e6bbab797c8_JaffaCakes118

.exe 139KB

16075f66086791c2d8e20e6bbab797c8_JaffaCakes118

IMPHASH 3a2003ea545fe942681da9e7683ebb58
SHA256 5fe59063e636d4d14ed69601dead727a2dc0909b49e5d56440f82c415d2754be
MD5 16075f66086791c2d8e20e6bbab797c8
SHA1 a063b6f66dda16518afcdee4dd22ee1a9803f9f7
SHA512 d210d32b69807401c2f1f7e33ff77c63c29b71e9a27e2c9118c0ccc5d94ecda63b1dadbf8b7ce5f12d3c04bbe8f5024813642a0979703c6e143d584e4a31ad28
SSDEEP 1536:8fjj+VDJ2Y1XJ2xH7Z3CPRs/sYuQrR7qKFFdr8uveDgK2FgGdFXCFnsUo6Ge/ASk:EjjSMY1XoRCP+/33rReWIVZvFsU5Jaf
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

430691

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lol 0

Size

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.lol 1

Size

135KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

16075f66086791c2d8e20e6bbab797c8_JaffaCakes118

kernel32

msvcrt

shell32

generic