JaffaCakes118_0e9d0251891b221685420a76ee08458b

General

Target
JaffaCakes118_0e9d0251891b221685420a76ee08458b
Size 76KB
Sample250122-r2fd2sskdr
SHA256 29ab9cf34cac55f5f3891ec047369c625e0bcc172b00d14d86851d7f64ea8a6b
MD5 0e9d0251891b221685420a76ee08458b
SHA1 93d5fefb6ef79baf9e3cbbf24fffe912da5f9bea
SHA512 7e2e08b6642511feb9a3d5201fea677059f55091f8771700ab9f540f47e7238a925f39aed6885b25dd2b328339a1ee0e26f9a5eabd14d6f736280ea4016a0043
SSDEEP 1536:g08ycVb3jZUVVS4DgzeZqJvhmjK5ZxMbngWYpaA9HAhWoICEWMPo:OycV4ieZq1kjKrxMrctghrIlWMg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0e9d0251891b221685420a76ee08458b

File Explorer

JaffaCakes118_0e9d0251891b221685420a76ee08458b

.dll 76KB

JaffaCakes118_0e9d0251891b221685420a76ee08458b

IMPHASH f9f638aaf9a6bedbfdf93ac6f4984867
SHA256 29ab9cf34cac55f5f3891ec047369c625e0bcc172b00d14d86851d7f64ea8a6b
MD5 0e9d0251891b221685420a76ee08458b
SHA1 93d5fefb6ef79baf9e3cbbf24fffe912da5f9bea
SHA512 7e2e08b6642511feb9a3d5201fea677059f55091f8771700ab9f540f47e7238a925f39aed6885b25dd2b328339a1ee0e26f9a5eabd14d6f736280ea4016a0043
SSDEEP 1536:g08ycVb3jZUVVS4DgzeZqJvhmjK5ZxMbngWYpaA9HAhWoICEWMPo:OycV4ieZq1kjKrxMrctghrIlWMg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6700

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.bhgj

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.uni

Size

512B

Virtual Size

428B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.ansi

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

JaffaCakes118_0e9d0251891b221685420a76ee08458b

advapi32

msvcrt

user32

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_0e9d0251891b221685420a76ee08458b

advapi32

msvcrt

user32

kernel32

generic