JaffaCakes118_1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024

General

Target
JaffaCakes118_1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024
Size 204KB
Sample241230-31e8favndk
SHA256 1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024
MD5 078c5f903db7bf98a4f81cbe14ecca8c
SHA1 821425cf542ca3f4d54e57bba9cc652c32467e88
SHA512 140269d6e255fe3593e9cbd35b5a920bfcfbefb7aeb86ae9c3751178ec29efba2a7a9f29e74f427e1a9bf32d81f012e4416af2f0761924352c905be57812c71c
SSDEEP 3072:U6FOf6h8i6pdDPvaaeEGObTS/HaoGoK9kN+Jcr9bhrFKL3fJpwZ:UZuX6pEaeEDheWa+Jc9bhorfTw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024

File Explorer

JaffaCakes118_1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024

.dll 204KB

JaffaCakes118_1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024

IMPHASH cb5482a0fad978688db5ffd0e59e43ac
SHA256 1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024
MD5 078c5f903db7bf98a4f81cbe14ecca8c
SHA1 821425cf542ca3f4d54e57bba9cc652c32467e88
SHA512 140269d6e255fe3593e9cbd35b5a920bfcfbefb7aeb86ae9c3751178ec29efba2a7a9f29e74f427e1a9bf32d81f012e4416af2f0761924352c905be57812c71c
SSDEEP 3072:U6FOf6h8i6pdDPvaaeEGObTS/HaoGoK9kN+Jcr9bhrFKL3fJpwZ:UZuX6pEaeEDheWa+Jc9bhorfTw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

42528

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=336, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=22, id=205, productName=VS2012 UPD4 build 61030, version=61030,

count=460, id=221, productName=VS2013 build 21005, version=21005,

count=349, id=132, productName=VS2008 build 21022, version=21022,

count=116, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=273, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=264, id=204, productName=VS2012 build 50727, version=50727,

count=77, id=146, productName=VS2008 SP1 build 30729, version=30729,

count=394, id=205, productName=VS2012 UPD4 build 61030, version=61030,

count=479, id=1, productName=Unmarked objects,

count=367, id=125, productName=VS2005 build 50727, version=50727,

count=199, id=260, productName=VS2015 UPD2 build 23918, version=23918,

count=493, id=157, productName=VS2010 SP1 build 40219, version=40219,

count=345, id=206, productName=VS2012 UPD3 build 60610, version=60610,

count=405, id=207, productName=VS2012 UPD2 build 60315, version=60315,

count=266, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

count=219, id=260, productName=VS2015 UPD3 build 24213, version=24213,

count=129, id=255, productName=VS2017 v15.5.4 build 25834, version=25834,

JaffaCakes118_1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024

wintrust

kernel32

gdi32

advapi32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_1223d6fa91d7bed85e02bff4045524f9e49bfba50c4df1b18926498fd7959024

wintrust

kernel32

gdi32

advapi32

user32

generic