80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

General

Target
80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118
Size 184KB
Sample241030-3ttggsspas
SHA256 2c9be134ebe1cc15fa0fab135a83e6b861ef7978e2fd0ccd25d7bc3d2f2ed578
MD5 80ab1da34f3e52cf7eaeaf0628aa4c1a
SHA1 c0c5f9ea0d2b4de14ec8f5bfe04c74efd9e556f3
SHA512 1d8a46545087a7761230e228b601d26b72bb6564a047fb5445b5c3d96030347b4f59cc1bfb2c6e2bbd7180b2572ef4369626af833d9156f6a6842949605feb84
SSDEEP 3072:yDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFZsvQ:6MhP1cq7/16CT9jnR1Vz7i0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

File Explorer

80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

.dll 184KB

80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

IMPHASH 9a51ae24217a1bb6b4e51e037dca80bb
SHA256 2c9be134ebe1cc15fa0fab135a83e6b861ef7978e2fd0ccd25d7bc3d2f2ed578
MD5 80ab1da34f3e52cf7eaeaf0628aa4c1a
SHA1 c0c5f9ea0d2b4de14ec8f5bfe04c74efd9e556f3
SHA512 1d8a46545087a7761230e228b601d26b72bb6564a047fb5445b5c3d96030347b4f59cc1bfb2c6e2bbd7180b2572ef4369626af833d9156f6a6842949605feb84
SSDEEP 3072:yDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFZsvQ:6MhP1cq7/16CT9jnR1Vz7i0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

26224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=476, id=124, productName=VS2005 build 50727, version=50727,

count=403, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=239, id=220, productName=VS2013 UPD4 build 31101, version=31101,

count=334, id=224, productName=VS2013 UPD3 build 30723, version=30723,

count=140, id=206, productName=VS2012 UPD1 build 51106, version=51106,

count=105, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=239, id=223, productName=VS2013 UPD3 build 30723, version=30723,

count=302, id=146, productName=VS2008 build 21022, version=21022,

count=34, id=205, productName=VS2012 UPD3 build 60610, version=60610,

count=201, id=204, productName=VS2012 UPD4 build 61030, version=61030,

count=71, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=246, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=392, id=1, productName=Unmarked objects,

count=365, id=260, productName=VS2015 UPD2 build 23918, version=23918,

count=298, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=450, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=245, id=146, productName=VS2008 build 21022, version=21022,

80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

user32

oleaut32

msvcrt

kernel32

advapi32

generic

Sharing

General

Malware Config

Signatures

File Explorer

80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

user32

oleaut32

msvcrt

kernel32

advapi32

generic