JaffaCakes118_2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2

General

Target
JaffaCakes118_2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2
Size 245KB
Sample241230-yrllmsypfx
SHA256 2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2
MD5 49debafabc8c6cd4481972452a64ae93
SHA1 514e0859b54d5373a4ffab8c6b3117c8fb1ff754
SHA512 e0c623268728184611fc9b62c5eae2a39eb7aaab73a8bc1b1d6ef2847164f5c764ca7c446d04a6fa2a1e3eeab1611ab27dcdd157b7d117e202fbd74425ee735d
SSDEEP 6144:7PAME3DMhXfaUyjrlhBAxmPPnSDHQEZp99fg:7P830XfsNAwETI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/80a6c3c9ce52dcbdfa63d15bca31502c93d105a9554b7d04c559f6ed0948e5c3

File Explorer

JaffaCakes118_2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2

.zip 245KB
80a6c3c9ce52dcbdfa63d15bca31502c93d105a9554b7d04c559f6ed0948e5c3

.exe 305KB

JaffaCakes118_2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2

SHA256 2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2
MD5 49debafabc8c6cd4481972452a64ae93
SHA1 514e0859b54d5373a4ffab8c6b3117c8fb1ff754
SHA512 e0c623268728184611fc9b62c5eae2a39eb7aaab73a8bc1b1d6ef2847164f5c764ca7c446d04a6fa2a1e3eeab1611ab27dcdd157b7d117e202fbd74425ee735d
SSDEEP 6144:7PAME3DMhXfaUyjrlhBAxmPPnSDHQEZp99fg:7P830XfsNAwETI
MD5 SHA1 SHA512 SSDEEP

Password

infected

80a6c3c9ce52dcbdfa63d15bca31502c93d105a9554b7d04c559f6ed0948e5c3

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 80a6c3c9ce52dcbdfa63d15bca31502c93d105a9554b7d04c559f6ed0948e5c3
MD5 82056f9901e19a723b58e0afa8f3de23
SHA1 bd5ef77aa3db4e073265583f521748894cb3823f
SHA512 2995f12739e62ad87a9d642682ec704974362e8c4c85179baa8ede6b2d22d68b82d1b448adb2534db93e949a11b17ba0a9df507186e26aeeef36b4cfa3e0bfe5
SSDEEP 6144:XlJKPQUbN/dObH6dHn3WFihI5BE8oF1fvOFPVtC:VJwNbN/dOrAHn3j8oOVS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

317282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2

80a6c3c9ce52dcbdfa63d15bca31502c93d105a9554b7d04c559f6ed0948e5c3

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_2782dbd1297140df074aa18e4d3ae35e6a21e545b8f85f271756bbf0f06683c2

80a6c3c9ce52dcbdfa63d15bca31502c93d105a9554b7d04c559f6ed0948e5c3

mscoree

dotnet