Overview

overview

10

Static

static

3

JaffaCakes...b0.exe

windows7-x64

10

JaffaCakes...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_6659631f2b97b6b9cb2ac5a0d7b2f9b0
  • Size 540KB
  • Sample250102-tkwe2sxnfx
  • SHA256 17f0b30fc5023af9c8b96b5ce42c0c47f497ec9b9acb8141f560eb9a80b81177
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • JaffaCakes118_6659631f2b97b6b9cb2ac5a0d7b2f9b0
    .exe .vbs 540KB

JaffaCakes118_6659631f2b97b6b9cb2ac5a0d7b2f9b0

  • IMPHASH 39b39bbb163f0884f72ad82728d73a76
  • SHA256 17f0b30fc5023af9c8b96b5ce42c0c47f497ec9b9acb8141f560eb9a80b81177
  • MD5 SHA1 SHA512 SSDEEP
windows:5windowsx86arch:x86polyglot

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
27947
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths
CLIPSRV.pdb