8f32e744bb08562fa7908945a94cc7ed_JaffaCakes118

General

Target
8f32e744bb08562fa7908945a94cc7ed_JaffaCakes118
Size 184KB
Sample241104-e9efhawqal
SHA256 2ff9e0b3b87d13f863c80535ce5ef01503419ff208f6845c354074944121b51d
MD5 8f32e744bb08562fa7908945a94cc7ed
SHA1 b748d7e9607d4bcb99ed549978c86b516f99202b
SHA512 fb5603c923ed2abe2e4619768bb31f18db997fa4cd93f18a3b34fff80629a3cc1305b198c9d354a559c46ab0ab0498373a4b27303b9cafdcae2b126a2e8b3969
SSDEEP 3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFRsvQ:SMhP1cq7/16CT9jnR1Vz7is
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f32e744bb08562fa7908945a94cc7ed_JaffaCakes118

File Explorer

8f32e744bb08562fa7908945a94cc7ed_JaffaCakes118

.dll 184KB

8f32e744bb08562fa7908945a94cc7ed_JaffaCakes118

IMPHASH 9a51ae24217a1bb6b4e51e037dca80bb
SHA256 2ff9e0b3b87d13f863c80535ce5ef01503419ff208f6845c354074944121b51d
MD5 8f32e744bb08562fa7908945a94cc7ed
SHA1 b748d7e9607d4bcb99ed549978c86b516f99202b
SHA512 fb5603c923ed2abe2e4619768bb31f18db997fa4cd93f18a3b34fff80629a3cc1305b198c9d354a559c46ab0ab0498373a4b27303b9cafdcae2b126a2e8b3969
SSDEEP 3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFRsvQ:SMhP1cq7/16CT9jnR1Vz7is
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

26224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=476, id=124, productName=VS2005 build 50727, version=50727,

count=403, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=239, id=220, productName=VS2013 UPD4 build 31101, version=31101,

count=334, id=224, productName=VS2013 UPD3 build 30723, version=30723,

count=140, id=206, productName=VS2012 UPD1 build 51106, version=51106,

count=105, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=239, id=223, productName=VS2013 UPD3 build 30723, version=30723,

count=302, id=146, productName=VS2008 build 21022, version=21022,

count=34, id=205, productName=VS2012 UPD3 build 60610, version=60610,

count=201, id=204, productName=VS2012 UPD4 build 61030, version=61030,

count=71, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=246, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=392, id=1, productName=Unmarked objects,

count=365, id=260, productName=VS2015 UPD2 build 23918, version=23918,

count=298, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=450, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=245, id=146, productName=VS2008 build 21022, version=21022,

8f32e744bb08562fa7908945a94cc7ed_JaffaCakes118

user32

oleaut32

msvcrt

kernel32

advapi32

generic

Sharing

General

Malware Config

Signatures

File Explorer

8f32e744bb08562fa7908945a94cc7ed_JaffaCakes118

user32

oleaut32

msvcrt

kernel32

advapi32

generic