JaffaCakes118_c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d

General

Target
JaffaCakes118_c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d
Size 737KB
Sample241230-w7e3pasrcj
SHA256 c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d
MD5 785988bb0d310f5da8ad01db31315216
SHA1 b2bcfdd5ff9abf26a85bb2fdb5b93e7f9160f511
SHA512 d635f5d99423c1b14e2642dbd4966296867f38348e96cb5d5fe3f58550caf437e8422ba1686b3755ce5fcd7fd8c20ef252b32c5a0b9a76033c1855b7a4ccc59b
SSDEEP 12288:NhImWW1xQnJAzCQt7GY/e6dBTAF2z9+pmyvTCrHFhGHBjghg/0x43e6GFCQV:Np1xOJAzC27FfTAUz9+pm6CrHfyFEgc/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/(TR Specs)_PRICE & HSCODE_.exe

File Explorer

JaffaCakes118_c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d

.rar 737KB
(TR Specs)_PRICE & HSCODE_.exe

.exe 785KB

JaffaCakes118_c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d

SHA256 c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d
MD5 785988bb0d310f5da8ad01db31315216
SHA1 b2bcfdd5ff9abf26a85bb2fdb5b93e7f9160f511
SHA512 d635f5d99423c1b14e2642dbd4966296867f38348e96cb5d5fe3f58550caf437e8422ba1686b3755ce5fcd7fd8c20ef252b32c5a0b9a76033c1855b7a4ccc59b
SSDEEP 12288:NhImWW1xQnJAzCQt7GY/e6dBTAF2z9+pmyvTCrHFhGHBjghg/0x43e6GFCQV:Np1xOJAzC27FfTAUz9+pm6CrHfyFEgc/
MD5 SHA1 SHA512 SSDEEP

(TR Specs)_PRICE & HSCODE_.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 80a59c03695471dba47b8b687c1ab3de599e3fe49581bfd0bb1d375af6e18d5d
MD5 2a66eec330f3eafb06abe16815b10d15
SHA1 a4ad694f7397a9a1adaee2c6dfcbeb9f053846a0
SHA512 390ba2eecc73f348a890a790439fb3ebf2116cbf16f471de477289cb803cc72bfd79b4d6189fb229ab4f8ba91bcc1240f9670230783ffee4fdec497b8a3acb32
SSDEEP 12288:CPE0ZQU3QB5lDTA/ozkvvv804Ukqu5pcABvGD5q2ge5inccS8lzmlJQYsooTW7:CPENTTzqML3in9+1olJQDW7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

806398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d

(TR Specs)_PRICE & HSCODE_.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_c0c4ba53306de86e58d082d8a5c5b0b609beb0174120b1e12089fdf639b80a2d

(TR Specs)_PRICE & HSCODE_.exe

mscoree

dotnet