JaffaCakes118_e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da

General

Target
JaffaCakes118_e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da
Size 184KB
Sample241223-2a63sstmdm
SHA256 e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da
MD5 0ddc774d4588b6d7c71233c5acc0d5e4
SHA1 e6bf14e05fc0e0be548f191e15ab0150d6ae5512
SHA512 7cfccf9d9f8924e30d94bafa293f35a6d25441a3b50d34500e48e57b8fde58797d369957bb36d77306bbfdccfd4aad945ff5f9940686638c84e13b5eb4506846
SSDEEP 3072:CiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:CiLVCIT4WK2z1W+CUHZj4Skq/eaoRoC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da

File Explorer

JaffaCakes118_e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da

.dll 184KB

JaffaCakes118_e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da

IMPHASH a6c7b0565586da90275c69f4b084ce85
SHA256 e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da
MD5 0ddc774d4588b6d7c71233c5acc0d5e4
SHA1 e6bf14e05fc0e0be548f191e15ab0150d6ae5512
SHA512 7cfccf9d9f8924e30d94bafa293f35a6d25441a3b50d34500e48e57b8fde58797d369957bb36d77306bbfdccfd4aad945ff5f9940686638c84e13b5eb4506846
SSDEEP 3072:CiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:CiLVCIT4WK2z1W+CUHZj4Skq/eaoRoC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

26608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=331, id=109, productName=VS2005 build 50727, version=50727,

count=163, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=317, id=156, productName=VS2010 build 30319, version=30319,

count=251, id=1, productName=Unmarked objects,

count=289, id=205, productName=VS2012 build 50727, version=50727,

count=375, id=257, productName=VS2017 v15.5.4 build 25834, version=25834,

count=286, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=304, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=206, id=220, productName=VS2013 UPD5 build 40629, version=40629,

count=23, id=202, productName=VS2012 build 50727, version=50727,

count=450, id=1, productName=Unmarked objects,

count=128, id=256, productName=VS2015 UPD1 build 23506, version=23506,

count=437, id=207, productName=VS2012 UPD4 build 61030, version=61030,

count=447, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=357, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=62, id=206, productName=VS2012 UPD1 build 51106, version=51106,

count=220, id=156, productName=VS2010 SP1 build 40219, version=40219,

count=312, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=239, id=205, productName=VS2012 UPD2 build 60315, version=60315,

count=6, id=207, productName=VS2012 UPD2 build 60315, version=60315,

count=292, id=223, productName=VS2013 build 21005, version=21005,

count=204, id=224, productName=VS2013 UPD2 build 30501, version=30501,

count=82, id=256, productName=VS2015 UPD1 build 23506, version=23506,

count=417, id=225, productName=VS2013 build 21005, version=21005,

count=264, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=358, id=256, productName=VS2015 UPD3 build 24213, version=24213,

JaffaCakes118_e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da

advapi32

user32

gdi32

oleaut32

msvcrt

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_e6a7355d587ef4d7ab935a7d2dee33421cde206434c08e737a9b59c8c9bfe3da

advapi32

user32

gdi32

oleaut32

msvcrt

kernel32

generic