JaffaCakes118_40c6fe1bde70a6dcfe3950f2220b6e03

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_40c6fe1bde70a6dcfe3950f2220b6e03
Size 89KB
Sample250127-sejnmatpcw
SHA256 82719f24198e890b3e7a4b3a69d63205c82f00e0e7c926461a9cc9f6cbe59b0b
MD5 40c6fe1bde70a6dcfe3950f2220b6e03
SHA1 5c05799209bc3c35f96f7551d25d854617cb542a
SHA512 5ada86a883c0fde5617d8247b93b8eb266baabfc77a144eb7aa23c936eecd4e44cc7a0018e9ae5fef0c8ad8d3642d6b014f133993c849f075b7559a0cac7b757
SSDEEP 1536:Ivg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07tes/nqgxk5B3JxHKJISOuXsdQ5f:IvgEL7Yo4PkH9sIb8s/q6g3COHJ9bCM8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-DEVOCHKA.exe

File Explorer

JaffaCakes118_40c6fe1bde70a6dcfe3950f2220b6e03

.zip 89KB
GOLAYA-DEVOCHKA.exe

.exe 180KB

JaffaCakes118_40c6fe1bde70a6dcfe3950f2220b6e03

SHA256 82719f24198e890b3e7a4b3a69d63205c82f00e0e7c926461a9cc9f6cbe59b0b
MD5 40c6fe1bde70a6dcfe3950f2220b6e03
SHA1 5c05799209bc3c35f96f7551d25d854617cb542a
SHA512 5ada86a883c0fde5617d8247b93b8eb266baabfc77a144eb7aa23c936eecd4e44cc7a0018e9ae5fef0c8ad8d3642d6b014f133993c849f075b7559a0cac7b757
SSDEEP 1536:Ivg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07tes/nqgxk5B3JxHKJISOuXsdQ5f:IvgEL7Yo4PkH9sIb8s/q6g3COHJ9bCM8
MD5 SHA1 SHA512 SSDEEP

GOLAYA-DEVOCHKA.exe

SHA256 e39b4d47bafb657aa37f821378b6140e21643173551f0c01adf8dbf4a3f0d748
MD5 b5bfc25ec5d0d2576975e6df14cee8f2
SHA1 ff48876248f0f0ff668aa7d67e2243bd9a3fd465
SHA512 aaaafcad061f3ce56aeb0a636fb375dbb8eda5d34e4ce743037ff90ec00b3cd972bbf671881f0a3fb3ab9a03f0782944454f78eed2cf33c72aff2e758e52ce6f
SSDEEP 3072:fBAp5XhKpN4eOyVTGfhEClj8jTk+0hD+V64pfPFxI:ibXE9OiTGfhEClq9VzfPFa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_40c6fe1bde70a6dcfe3950f2220b6e03

GOLAYA-DEVOCHKA.exe

generic