JaffaCakes118_0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8

General

Target
JaffaCakes118_0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8
Size 9.9MB
Sample241223-xjsvbaxpes
SHA256 0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8
MD5 dca578964c629188253d4c03dc2f0d03
SHA1 f416e2b977d17b3eb0fbfdec801da8f40a9fc8e3
SHA512 27aad213013796c7a91f3b8a1cdd4a4068e1c87301fd37b98d93db25541aa41b5c487d153d1cb15debefa3abb3c6715acee8fe926654a32c278ca3a32d9a3a96
SSDEEP 196608:uwrDbxBuG6QLGcpavmRYbrtHaLgCHvQCSONBUnwwfQOYdtwiJYmhGeXwC:DPbxB+kZk8OHCSyqnwK+dtNJplv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cf2166bcce3d3cd77cd9dc91d33f1d10c084ae31a6adbf542e24a43cdcd2314d.exe

File Explorer

JaffaCakes118_0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8

.zip 9.9MB
cf2166bcce3d3cd77cd9dc91d33f1d10c084ae31a6adbf542e24a43cdcd2314d.exe

.exe 28.6MB

JaffaCakes118_0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8

SHA256 0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8
MD5 dca578964c629188253d4c03dc2f0d03
SHA1 f416e2b977d17b3eb0fbfdec801da8f40a9fc8e3
SHA512 27aad213013796c7a91f3b8a1cdd4a4068e1c87301fd37b98d93db25541aa41b5c487d153d1cb15debefa3abb3c6715acee8fe926654a32c278ca3a32d9a3a96
SSDEEP 196608:uwrDbxBuG6QLGcpavmRYbrtHaLgCHvQCSONBUnwwfQOYdtwiJYmhGeXwC:DPbxB+kZk8OHCSyqnwK+dtNJplv
MD5 SHA1 SHA512 SSDEEP

Password

infected

cf2166bcce3d3cd77cd9dc91d33f1d10c084ae31a6adbf542e24a43cdcd2314d.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 cf2166bcce3d3cd77cd9dc91d33f1d10c084ae31a6adbf542e24a43cdcd2314d
MD5 9116c5fb992227e6c738307d2de17552
SHA1 110741c697079bb7355a3650c5d86ba7c1f908e6
SHA512 bb127bb1e23dd6da2040dd1c1ee7be1c7b481b2d4636af4f07f1b9449dd445400d431c99b019a86b6ae7d99ffee05f16cb304a99a29006fdff3e36d760c6ea11
SSDEEP 393216:esT23WtehI4MPAfu5FFYeQCs88zvwJMO:1aUFbFzr8zvKM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29963278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8

cf2166bcce3d3cd77cd9dc91d33f1d10c084ae31a6adbf542e24a43cdcd2314d.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_0130b240236c6705dd2d464db286f43ad43b827179e229c1ac7dd61b3bb2fcd8

cf2166bcce3d3cd77cd9dc91d33f1d10c084ae31a6adbf542e24a43cdcd2314d.exe

mscoree

dotnet