JaffaCakes118_a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6

General

Target
JaffaCakes118_a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6
Size 218KB
Sample241230-a6n4baslel
SHA256 a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6
MD5 b0f477fdaed8b32f6f3ce739a9405011
SHA1 f29b0921269c4e3b057a126e4d820fbc7b05f111
SHA512 a47648bfc46be49d2e0f1d520e63c360ca69dd99080f95c8932a1425360efa26ff79be73b0003c592e35adff9bc73e2c60da75f11a6ad513e44775981e4fe82c
SSDEEP 6144:4JX9a4ECC93u0usum4dscgbD2UAoW9CqRP+qVH:WX9a4EPFQY1D26WxR2A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Iwfifvwzd4.exe

File Explorer

JaffaCakes118_a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6

.zip 218KB
Iwfifvwzd4.exe

.exe 395KB

JaffaCakes118_a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6

SHA256 a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6
MD5 b0f477fdaed8b32f6f3ce739a9405011
SHA1 f29b0921269c4e3b057a126e4d820fbc7b05f111
SHA512 a47648bfc46be49d2e0f1d520e63c360ca69dd99080f95c8932a1425360efa26ff79be73b0003c592e35adff9bc73e2c60da75f11a6ad513e44775981e4fe82c
SSDEEP 6144:4JX9a4ECC93u0usum4dscgbD2UAoW9CqRP+qVH:WX9a4EPFQY1D26WxR2A
MD5 SHA1 SHA512 SSDEEP

Password

infected

Iwfifvwzd4.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 84f6968bec673a61d9408dd7a9dc1bf38be61c947078887d27d09210792f5eee
MD5 c942e578f5449ab92e720f47f2cbbb8f
SHA1 460cdca7556f9ee5dc5492096b21c997a3d1a819
SHA512 262f5cd85d2e1ed6266937e9fd64207f3266a6dc05c75599cc19f845fed7aa56e5314204955649dea0798b49571093394d296eca5bfe002cdd2451e8213d6991
SSDEEP 6144:h4MUo9SMQq3NB3cgT0YAOjVmiV13wYi/4TG:nS+3b4EmiTjigT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

242319

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6

Iwfifvwzd4.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_a1c3e17317a6578fee600bc9bbc3a7fe621d65839b8ca372989483734aeed3b6

Iwfifvwzd4.exe

mscoree

dotnet