JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea

General

Target
JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea
Size 7.9MB
Sample241222-ppzwtaymbm
SHA256 f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea
MD5 673f03f4bc936698b12814e3733f39e1
SHA1 f63fc01108f7f6fa371116e1e884260cf08ebd26
SHA512 42a5090b44694e9f9fe55878d7087b585667eb3bb9c375e552997a60808f600e3224b0f71f1592a808c9d5796df4b64916ce7cdbd7766700b645ad5b07ba5bc6
SSDEEP 196608:/fFcW1loyyEfHCzAWZJLKU7v4650rxEp7h/GzqA3A9tC:lcW1lKEnWjKBqsCp7R4qJC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e

File Explorer

JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea

.zip 7.9MB
0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e

.exe 366.3MB

JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea

SHA256 f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea
MD5 673f03f4bc936698b12814e3733f39e1
SHA1 f63fc01108f7f6fa371116e1e884260cf08ebd26
SHA512 42a5090b44694e9f9fe55878d7087b585667eb3bb9c375e552997a60808f600e3224b0f71f1592a808c9d5796df4b64916ce7cdbd7766700b645ad5b07ba5bc6
SSDEEP 196608:/fFcW1loyyEfHCzAWZJLKU7v4650rxEp7h/GzqA3A9tC:lcW1lKEnWjKBqsCp7R4qJC
MD5 SHA1 SHA512 SSDEEP

Password

infected

0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e

IMPHASH 2c2c8a0f07b8dabf29d974b2f09dbdf9
SHA256 0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e
MD5 82793f75388af5ca540609250ccb2397
SHA1 fe8b0155d2f3cc258aa3408ca75ce396c6a67a7d
SHA512 10b96eb816086589cd80cc097dd3bfe26ad1ff079e0b86e564d4209ec0b7462efb05c926a8c868dc0bb4bb6b4ecf32128def534e749cfd74bef84053bef54b08
SSDEEP 196608:EWntYI5uLBn0H2j76BG3jEd8jquepipoO:EWh50WueA4dlueoH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

14659790

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea

0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea

0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e

kernel32

user32

generic