JaffaCakes118_b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb

General

Target
JaffaCakes118_b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb
Size 197KB
Sample241225-a1b7kaskf1
SHA256 b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb
MD5 4a09615143f883c7ff789d10f982562f
SHA1 8627c133145d1d57ed4c57abce56bacf82dc70a2
SHA512 ec67bc75fee73523b6eebe26bd32c3ae57b6c1a9130a580a8cad708ec02684717134bcb990f2ef5cc9d84146ec8d60171a9f9289e10ee68c1d47767e12a1fad1
SSDEEP 6144:f6cwe2Dp8YLLkzm2pew+/se463IlFVoXl06Y2:Sxe2QAwSQiILVoah2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a86d9bb9ad2b22d6148329d45a59cbc27c7f3a8e65e8997fffda803b16f25fad

File Explorer

JaffaCakes118_b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb

.zip 197KB
a86d9bb9ad2b22d6148329d45a59cbc27c7f3a8e65e8997fffda803b16f25fad

.exe 261KB

JaffaCakes118_b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb

SHA256 b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb
MD5 4a09615143f883c7ff789d10f982562f
SHA1 8627c133145d1d57ed4c57abce56bacf82dc70a2
SHA512 ec67bc75fee73523b6eebe26bd32c3ae57b6c1a9130a580a8cad708ec02684717134bcb990f2ef5cc9d84146ec8d60171a9f9289e10ee68c1d47767e12a1fad1
SSDEEP 6144:f6cwe2Dp8YLLkzm2pew+/se463IlFVoXl06Y2:Sxe2QAwSQiILVoah2
MD5 SHA1 SHA512 SSDEEP

Password

infected

a86d9bb9ad2b22d6148329d45a59cbc27c7f3a8e65e8997fffda803b16f25fad

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a86d9bb9ad2b22d6148329d45a59cbc27c7f3a8e65e8997fffda803b16f25fad
MD5 b11998e748a73de0094e9c8a742225e6
SHA1 d7ec09cd52c1f0e2f6d21dfda48689d51b7a4840
SHA512 210e60c67a5dca1376698e41df5ea7c483b5ca353e767d21405074bade4d44bcbf576ccb9437baba4ce9bc85bec8d963975a69c0286318232e2bc8793b935794
SSDEEP 6144:ZNJfAJdpbgneJK2BPqWOyJAGovjNcjat9w44mZ/M:STFgeE2BbOIrovjm+934U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

272702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb

a86d9bb9ad2b22d6148329d45a59cbc27c7f3a8e65e8997fffda803b16f25fad

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_b63757a2f92f47504fbb8209974df675376e1ede02df49b2619beb59281955cb

a86d9bb9ad2b22d6148329d45a59cbc27c7f3a8e65e8997fffda803b16f25fad

mscoree

dotnet