JaffaCakes118_30e770b41dc424cdcec73f33f1454ae7

General

Target
JaffaCakes118_30e770b41dc424cdcec73f33f1454ae7
Size 490KB
Sample251024-tdl8sssmdr
SHA256 6b2e7c5ca07fdadc80b88c5ac47862c12089d65c31df6f5f9f77921c92105ddd
MD5 30e770b41dc424cdcec73f33f1454ae7
SHA1 16635a3953f0d1b950a93da79a95cc38753c6b77
SHA512 ee45aaf40f1a69280ba9fe193dfd4606b11bb93168610961734a0eb8c63cbbe2b01ff06bab23830db80a263b61b1eff34dfcbbc792508bffecc0ef1b037d902f
SSDEEP 12288:BXRa7ePP2yqdig78e2NVlEMpaTnvYAbGqO6u5QDAYURWr:BXrur78e2dFcTv1O6YGURWr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/New Order.exe

File Explorer

JaffaCakes118_30e770b41dc424cdcec73f33f1454ae7

.ace 490KB
out.ace

.ace 490KB
New Order.exe

.exe 909KB

JaffaCakes118_30e770b41dc424cdcec73f33f1454ae7

SHA256 6b2e7c5ca07fdadc80b88c5ac47862c12089d65c31df6f5f9f77921c92105ddd
MD5 30e770b41dc424cdcec73f33f1454ae7
SHA1 16635a3953f0d1b950a93da79a95cc38753c6b77
SHA512 ee45aaf40f1a69280ba9fe193dfd4606b11bb93168610961734a0eb8c63cbbe2b01ff06bab23830db80a263b61b1eff34dfcbbc792508bffecc0ef1b037d902f
SSDEEP 12288:BXRa7ePP2yqdig78e2NVlEMpaTnvYAbGqO6u5QDAYURWr:BXrur78e2dFcTv1O6YGURWr
MD5 SHA1 SHA512 SSDEEP

New Order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7346088c6adad4d688daaf90b49a1f2a985ba4ae09b1a3e5351ee28e22ca23ed
MD5 43672794e383a2d256df77a3155dbae1
SHA1 c90b991b89ac4f58d32cfc353505f394f0ac0da4
SHA512 c224f95d2c9f2dac1bda58cc678e4b923a209ad78a0f3f1ecf04b21b3d628644c1667340e3ac7a9f2f81804382e1eb873aa6a6a5b27ec8068542a5123ea27ef7
SSDEEP 12288:RSLxZ0EG3KQyTs4XlhyI/vbU17yZP/sqUpQZZQhQmXhng3AXgv1C0vm7/91:RSU72nsLuTQQmXJgQQtC/7H
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

935806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_30e770b41dc424cdcec73f33f1454ae7

out.ace

New Order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_30e770b41dc424cdcec73f33f1454ae7

out.ace

New Order.exe

mscoree

dotnet