c86e24c2f5b246e9512775e35919b9eb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c86e24c2f5b246e9512775e35919b9eb_JaffaCakes118
Size 1.0MB
Sample241205-tbbdhs1maw
SHA256 2eb3a650289eae678ad899b34b3a4fe7a7aa813d66df7d41666d459cbf617158
MD5 c86e24c2f5b246e9512775e35919b9eb
SHA1 cc2857b7f1caec4343c7bbe546ffa295f1da2d88
SHA512 5f38c9501496f1613879a97f6c45209635fa80ab85fabe48b4ac353d5dd5181b32da4cc94fe3b32bd518ae84f88f7a75cb4f5b69839db0e94708c588dfcbdbef
SSDEEP 12288:8dMIwS97wJs6tSKDXEabXaC+jhc1S8XXk7CZzHsZH9dq0T:OMIJxSDX3bqjhcfHk7MzH6z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c86e24c2f5b246e9512775e35919b9eb_JaffaCakes118

File Explorer

c86e24c2f5b246e9512775e35919b9eb_JaffaCakes118

.dll 1.0MB

c86e24c2f5b246e9512775e35919b9eb_JaffaCakes118

IMPHASH c6b4c2eec8a93016c63563421e15f011
SHA256 2eb3a650289eae678ad899b34b3a4fe7a7aa813d66df7d41666d459cbf617158
MD5 c86e24c2f5b246e9512775e35919b9eb
SHA1 cc2857b7f1caec4343c7bbe546ffa295f1da2d88
SHA512 5f38c9501496f1613879a97f6c45209635fa80ab85fabe48b4ac353d5dd5181b32da4cc94fe3b32bd518ae84f88f7a75cb4f5b69839db0e94708c588dfcbdbef
SSDEEP 12288:8dMIwS97wJs6tSKDXEabXaC+jhc1S8XXk7CZzHsZH9dq0T:OMIJxSDX3bqjhcfHk7MzH6z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

493408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FGT7t.pdb

Name

.text

Size

496KB

Virtual Size

494KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

56KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

580B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

905B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

249B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=468, id=201, productName=VS2012 UPD1 build 51106, version=51106,

count=222, id=1, productName=Unmarked objects,

count=125, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=208, id=224, productName=VS2013 UPD3 build 30723, version=30723,

count=244, id=157, productName=VS2010 SP1 build 40219, version=40219,

count=132, id=222, productName=VS2013 build 21005, version=21005,

count=454, id=259, productName=VS2015 UPD3 build 24210, version=24210,

count=15, id=204, productName=VS2012 UPD3 build 60610, version=60610,

count=320, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=312, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=112, id=256, productName=VS2017 v15.5.4 build 25834, version=25834,

count=78, id=220, productName=VS2013 UPD3 build 30723, version=30723,

count=431, id=205, productName=VS2012 UPD1 build 51106, version=51106,

count=343, id=205, productName=VS2012 UPD1 build 51106, version=51106,

count=460, id=203, productName=VS2012 UPD4 build 61030, version=61030,

count=503, id=205, productName=VS2012 UPD2 build 60315, version=60315,

Sharing

General

Malware Config

Signatures

File Explorer

c86e24c2f5b246e9512775e35919b9eb_JaffaCakes118

crypt32

generic