JaffaCakes118_fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309
Size 727.0MB
Sample241223-vdthjsvqcm
SHA256 fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309
MD5 a07ffe611e932758c691e1b680767b94
SHA1 e12ed57f13ea7e3e4ba03ebaf9dc355fe389804c
SHA512 11f58d8844be96b5f3681d314f79a29fb9c8cae7fc955bdc581a769c8597099e7eb05d81aab28fd5a5ce213de15bc2008d12196fe61477eab2e46dfcb6db00c4
SSDEEP 196608:6z3XPGbI0jLWr2kfVxqfEFczf3SadH/Jrx4DWC0Gmy3:unaNLWPxqMFoxIk8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309

File Explorer

JaffaCakes118_fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309

.exe 727.0MB

JaffaCakes118_fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309

IMPHASH 0901266657d602fff9c7d9a865574642
SHA256 fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309
MD5 a07ffe611e932758c691e1b680767b94
SHA1 e12ed57f13ea7e3e4ba03ebaf9dc355fe389804c
SHA512 11f58d8844be96b5f3681d314f79a29fb9c8cae7fc955bdc581a769c8597099e7eb05d81aab28fd5a5ce213de15bc2008d12196fe61477eab2e46dfcb6db00c4
SSDEEP 196608:6z3XPGbI0jLWr2kfVxqfEFczf3SadH/Jrx4DWC0Gmy3:unaNLWPxqMFoxIk8
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9592516

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.`*O

Size

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.GYh

Size

1024B

Virtual Size

872B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.+eu

Size

6.8MB

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

403KB

Virtual Size

402KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

JaffaCakes118_fccfe9679f8c02044863ca2dd8b8117e1fb62a6d2ef55022d19c089a87555309

kernel32

user32

generic