68eef5794f9cd9011c0b81726387fc0c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
68eef5794f9cd9011c0b81726387fc0c_JaffaCakes118
Size 3.1MB
Sample241022-e8th2azdqk
SHA256 aa5898c193b970f1e2e1473f6a29ae5f289056ece66d88fc243e41af913d39c0
MD5 68eef5794f9cd9011c0b81726387fc0c
SHA1 18ba4a00d8c0329d0f85d8d28aef9075f27f413d
SHA512 deda5104dcedbc66e46fe7078631874a2dde046448eeac910e8e3835c6b96ff97d18bbb5f64c23252af1120a55400b4013b8262ddf42c003767c5e323021d8e7
SSDEEP 49152:CB6+AzOyxdWrFeSzN6qF9EADcv7RFF3pRXqVBB7STydGBicBdY7VioiGs5:CBuiyxYektEAoRj5NIoXBi/VioiG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68eef5794f9cd9011c0b81726387fc0c_JaffaCakes118

File Explorer

68eef5794f9cd9011c0b81726387fc0c_JaffaCakes118

.exe 3.1MB

68eef5794f9cd9011c0b81726387fc0c_JaffaCakes118

IMPHASH ddac763cd93a71cf804ca6ade256d3f1
SHA256 aa5898c193b970f1e2e1473f6a29ae5f289056ece66d88fc243e41af913d39c0
MD5 68eef5794f9cd9011c0b81726387fc0c
SHA1 18ba4a00d8c0329d0f85d8d28aef9075f27f413d
SHA512 deda5104dcedbc66e46fe7078631874a2dde046448eeac910e8e3835c6b96ff97d18bbb5f64c23252af1120a55400b4013b8262ddf42c003767c5e323021d8e7
SSDEEP 49152:CB6+AzOyxdWrFeSzN6qF9EADcv7RFF3pRXqVBB7STydGBicBdY7VioiGs5:CBuiyxYektEAoRj5NIoXBi/VioiG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5306201

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

wHdcM:d0

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

^Hy(,F-E

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

?>U.a:u$

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

M:f\5q/N

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

iLZZ6K\W

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

'=PVMj?*

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

K.vM#=G+

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.!rc!

Size

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

28#b5os]

Size

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

7nX,B^^B

Size

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

u-bd)S8j

Size

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

D xMUA"H

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp0

Size

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE

Name

.vmp1

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

68eef5794f9cd9011c0b81726387fc0c_JaffaCakes118

kernel32

user32

advapi32

oleaut32

mpr

version

gdi32

ole32

comctl32

shell32

wininet

comdlg32

wsock32

generic