JaffaCakes118_3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc
Size 317KB
Sample241229-e3spjssne1
SHA256 3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc
MD5 f1b68baa001140f5b3b8de259d0b5fa3
SHA1 6d3e711d41075a7b823f1b7021fc56493208f93d
SHA512 c3e8fb3c365e3b393ee0ef021c03b16fdb216f26d5caa22feb5d3ebb9b8691ea6587391e28d7a305cc188b3563f5b3f0097ab2e5cb0c3879f856b96df8118a3c
SSDEEP 6144:lOng99RsJXPwxgTsqDyODlWJn+6vjbR+yCzBIBID7ontvj9ijmvIZ4iNsiGVQ5:0ng99iwx4OnBvR12gI4B9ijKIZjWi/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d0415a982b597f7d0e88754646beb52353338d362cb476b341aba50dd7115e2e

File Explorer

JaffaCakes118_3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc

.zip 317KB
d0415a982b597f7d0e88754646beb52353338d362cb476b341aba50dd7115e2e

.exe 600KB

JaffaCakes118_3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc

SHA256 3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc
MD5 f1b68baa001140f5b3b8de259d0b5fa3
SHA1 6d3e711d41075a7b823f1b7021fc56493208f93d
SHA512 c3e8fb3c365e3b393ee0ef021c03b16fdb216f26d5caa22feb5d3ebb9b8691ea6587391e28d7a305cc188b3563f5b3f0097ab2e5cb0c3879f856b96df8118a3c
SSDEEP 6144:lOng99RsJXPwxgTsqDyODlWJn+6vjbR+yCzBIBID7ontvj9ijmvIZ4iNsiGVQ5:0ng99iwx4OnBvR12gI4B9ijKIZjWi/
MD5 SHA1 SHA512 SSDEEP

d0415a982b597f7d0e88754646beb52353338d362cb476b341aba50dd7115e2e

SHA256 d0415a982b597f7d0e88754646beb52353338d362cb476b341aba50dd7115e2e
MD5 f744fbf5d93fc269a75f9a84a079aea9
SHA1 a8094d90ca9cf4b1382938536a195917a56aa8b0
SHA512 e00cff33c9236de0176ad6b6f5a3024d4611cd4dc8d9ea697af5bf3c3cb90bb7d2775ef6baa14c29f5e123867b9e63e3d0135c075468e261cd9d0b17648d34cd
SSDEEP 12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFNPA7G:Mj2v1crE/h7SGFNPA7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

462052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

447KB

Virtual Size

447KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc

d0415a982b597f7d0e88754646beb52353338d362cb476b341aba50dd7115e2e

generic