161337d3ffd09408a54f615ee3c1116f_JaffaCakes118

General

Target
161337d3ffd09408a54f615ee3c1116f_JaffaCakes118
Size 104KB
Sample241005-ele25aydnd
SHA256 dffdeda62abe601e86fdc4a95d710daa9ce5bdd2b8ebdd9f62fd664f2a3ef032
MD5 161337d3ffd09408a54f615ee3c1116f
SHA1 2ce8e4271f993a1611db8084ce3dfb5243f9e71a
SHA512 84a66703b483d1782e72284cad089d09eb48f349ae5d360ace682eba68f732257e2c2a929df706cb9bacdc947b785031d41408defb62b47ef0a171f8aa2bdfe9
SSDEEP 3072:TD09MaWLOdfPQdYeW2URSTmzEuVUP/AytUeGi:laqOdHQoOju+nA0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
161337d3ffd09408a54f615ee3c1116f_JaffaCakes118

File Explorer

161337d3ffd09408a54f615ee3c1116f_JaffaCakes118

.dll 104KB

161337d3ffd09408a54f615ee3c1116f_JaffaCakes118

IMPHASH c1cd430cf38ed2b3bacdd7f8ddb91ef2
SHA256 dffdeda62abe601e86fdc4a95d710daa9ce5bdd2b8ebdd9f62fd664f2a3ef032
MD5 161337d3ffd09408a54f615ee3c1116f
SHA1 2ce8e4271f993a1611db8084ce3dfb5243f9e71a
SHA512 84a66703b483d1782e72284cad089d09eb48f349ae5d360ace682eba68f732257e2c2a929df706cb9bacdc947b785031d41408defb62b47ef0a171f8aa2bdfe9
SSDEEP 3072:TD09MaWLOdfPQdYeW2URSTmzEuVUP/AytUeGi:laqOdHQoOju+nA0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

45056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

340B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

712B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

658B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

161337d3ffd09408a54f615ee3c1116f_JaffaCakes118

msvcrt

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

161337d3ffd09408a54f615ee3c1116f_JaffaCakes118

msvcrt

kernel32

generic