JaffaCakes118_e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9

General

Target
JaffaCakes118_e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9
Size 177KB
Sample241230-e7wl1aykbw
SHA256 e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9
MD5 b7aeb0ddedb004644b849ee8d042b58a
SHA1 db01fb8a7e03d5a7a8a81c1c201c4d97de7fd144
SHA512 2c1a30739e7d260f5dab0dc6cfb814da6ac3cd692479f42b759722da72d87f513aace03db2d7dc5772f02f0d22cade05aac7b547c66170b0a47f3c77ce9178b5
SSDEEP 3072:PuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:LzWxkOP4p2EesvcDi6DOHPJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9

File Explorer

JaffaCakes118_e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9

.dll 177KB

JaffaCakes118_e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9

IMPHASH b380277cbb8ae5571489cb34552d83fd
SHA256 e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9
MD5 b7aeb0ddedb004644b849ee8d042b58a
SHA1 db01fb8a7e03d5a7a8a81c1c201c4d97de7fd144
SHA512 2c1a30739e7d260f5dab0dc6cfb814da6ac3cd692479f42b759722da72d87f513aace03db2d7dc5772f02f0d22cade05aac7b547c66170b0a47f3c77ce9178b5
SSDEEP 3072:PuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:LzWxkOP4p2EesvcDi6DOHPJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

27376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=172, id=122, productName=VS2005 build 50727, version=50727,

count=344, id=158, productName=VS2010 build 30319, version=30319,

count=362, id=225, productName=VS2013 UPD2 build 30501, version=30501,

count=274, id=255, productName=VS2017 v15.5.4 build 25834, version=25834,

count=198, id=157, productName=VS2010 build 30319, version=30319,

count=100, id=258, productName=VS2015 UPD2 build 23918, version=23918,

count=141, id=257, productName=VS2015 UPD1 build 23506, version=23506,

count=212, id=201, productName=VS2012 UPD1 build 51106, version=51106,

count=96, id=207, productName=VS2012 UPD3 build 60610, version=60610,

count=45, id=158, productName=VS2010 build 30319, version=30319,

count=214, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=200, id=258, productName=VS2017 v15.5.4 build 25834, version=25834,

count=179, id=224, productName=VS2013 UPD4 build 31101, version=31101,

count=137, id=1, productName=Unmarked objects,

count=75, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=140, id=207, productName=VS2012 build 50727, version=50727,

count=44, id=261, productName=VS2015 UPD3 build 24213, version=24213,

count=503, id=256, productName=VS2017 v15.5.4 build 25834, version=25834,

count=217, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=171, id=261, productName=VS2017 v15.5.4 build 25834, version=25834,

count=396, id=202, productName=VS2012 UPD2 build 60315, version=60315,

count=280, id=220, productName=VS2013 UPD4 build 31101, version=31101,

count=506, id=202, productName=VS2012 UPD1 build 51106, version=51106,

count=148, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=98, id=259, productName=VS2017 v15.5.4 build 25834, version=25834,

count=297, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=78, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=55, id=219, productName=VS2013 build 21005, version=21005,

count=431, id=201, productName=VS2012 UPD3 build 60610, version=60610,

count=287, id=206, productName=VS2012 build 50727, version=50727,

JaffaCakes118_e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9

ws2_32

kernel32

mprapi

advapi32

user32

shlwapi

winspool.drv

crypt32

msvcrt

generic

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_e650d46e3d46fb2645175ae77ec7b9570740f1cde008bf43e47d9afcf893e7d9

ws2_32

kernel32

mprapi

advapi32

user32

shlwapi

winspool.drv

crypt32

msvcrt

generic