56bb9a9db5f392d8c7614ab4b3537951_JaffaCakes118

General

Target
56bb9a9db5f392d8c7614ab4b3537951_JaffaCakes118
Size 390KB
Sample241018-lprzessemj
SHA256 ff233af2187a5aee8d3911360eef243367c505348b896473cadb76e077d44646
MD5 56bb9a9db5f392d8c7614ab4b3537951
SHA1 3e5e31e1f8c37d74369ac09cdb0a1054c4804474
SHA512 49c12b6d22f9fe9f23f8d5d8eb1b57b3a5d8394aec12a6bc4b54cfd75ae037f6d0801824a534f3355f4a7fc6ff7888616de64e9bb58d2809eb044923ca7b9303
SSDEEP 6144:DKmZVEKtFCy01S1uHWNF72Osooq86PO05GmmW05KZoDdEMm/dYqG/5k5cqvcbfpd:DHZVVFSWuHwyOs2wh5moDd1Y+Y6T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bnh.exe

File Explorer

56bb9a9db5f392d8c7614ab4b3537951_JaffaCakes118

.7z 390KB
bnh.exe

.exe 614KB

56bb9a9db5f392d8c7614ab4b3537951_JaffaCakes118

SHA256 ff233af2187a5aee8d3911360eef243367c505348b896473cadb76e077d44646
MD5 56bb9a9db5f392d8c7614ab4b3537951
SHA1 3e5e31e1f8c37d74369ac09cdb0a1054c4804474
SHA512 49c12b6d22f9fe9f23f8d5d8eb1b57b3a5d8394aec12a6bc4b54cfd75ae037f6d0801824a534f3355f4a7fc6ff7888616de64e9bb58d2809eb044923ca7b9303
SSDEEP 6144:DKmZVEKtFCy01S1uHWNF72Osooq86PO05GmmW05KZoDdEMm/dYqG/5k5cqvcbfpd:DHZVVFSWuHwyOs2wh5moDd1Y+Y6T
MD5 SHA1 SHA512 SSDEEP

bnh.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1a55fa78a001127ab3e53317fc29487b57343034496594949610a78191156519
MD5 c2927f706f2fc5d37767de3f40c8671b
SHA1 457a0cbf5058152f04bcf018534646bbce2b5646
SHA512 5c37cba7f9dd2bde172daa6a61a4cd2d1395cb3dd5c8016becb13a5054908b003f416a37016f188d28db8d5e4db9199a0f9983cd52ee1a393d1a23ca75415539
SSDEEP 12288:xMz3Zg6g2zuXCzXDUO03kdwTYDHiwngDa2mYj:xM766g2qSzzRDLnD2m
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

609934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

56bb9a9db5f392d8c7614ab4b3537951_JaffaCakes118

bnh.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

56bb9a9db5f392d8c7614ab4b3537951_JaffaCakes118

bnh.exe

mscoree

dotnet