1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

General

Target
1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118
Size 184KB
Sample241007-qky96axcnl
SHA256 61c8becd45a9a865a60363650950126ff8db1649067dedaa9d8ade448d1fa3cb
MD5 1da4e3fb8f0f99b2eb3446ccfbeca130
SHA1 540693b7f3f22d396c3523c61881359f5e88e386
SHA512 69fc411079ef562bf937e44a2bdf5a6914550747d0b937c0f8fcff506945b46b9be49d00f13933f61d86b4f3717a481e2a349f83014567f29bef7442897e7be5
SSDEEP 3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFpsvQ:SMhP1cq7/16CT9jnR1Vz7is
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

File Explorer

1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

.dll 184KB

1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

IMPHASH 9a51ae24217a1bb6b4e51e037dca80bb
SHA256 61c8becd45a9a865a60363650950126ff8db1649067dedaa9d8ade448d1fa3cb
MD5 1da4e3fb8f0f99b2eb3446ccfbeca130
SHA1 540693b7f3f22d396c3523c61881359f5e88e386
SHA512 69fc411079ef562bf937e44a2bdf5a6914550747d0b937c0f8fcff506945b46b9be49d00f13933f61d86b4f3717a481e2a349f83014567f29bef7442897e7be5
SSDEEP 3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFpsvQ:SMhP1cq7/16CT9jnR1Vz7is
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

26224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=476, id=124, productName=VS2005 build 50727, version=50727,

count=403, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=239, id=220, productName=VS2013 UPD4 build 31101, version=31101,

count=334, id=224, productName=VS2013 UPD3 build 30723, version=30723,

count=140, id=206, productName=VS2012 UPD1 build 51106, version=51106,

count=105, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=239, id=223, productName=VS2013 UPD3 build 30723, version=30723,

count=302, id=146, productName=VS2008 build 21022, version=21022,

count=34, id=205, productName=VS2012 UPD3 build 60610, version=60610,

count=201, id=204, productName=VS2012 UPD4 build 61030, version=61030,

count=71, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=246, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=392, id=1, productName=Unmarked objects,

count=365, id=260, productName=VS2015 UPD2 build 23918, version=23918,

count=298, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=450, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=245, id=146, productName=VS2008 build 21022, version=21022,

1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

user32

oleaut32

msvcrt

kernel32

advapi32

generic

Sharing

General

Malware Config

Signatures

File Explorer

1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

user32

oleaut32

msvcrt

kernel32

advapi32

generic