JaffaCakes118_365ff339940e368785f4d48cda544710

General

Target
JaffaCakes118_365ff339940e368785f4d48cda544710
Size 26KB
Sample251217-2bs8bswqf1
SHA256 09104af77c40c167ef7173af0deca9a997dfc44f4ffb51eda1d0a0cd2ec2fa5f
MD5 365ff339940e368785f4d48cda544710
SHA1 66fbf3560535ed15ba008bc6655edbd842ee455b
SHA512 ad977178940ee7ec46960a72a3de7d128c0e85faa006c959652dcdb5a5b83d6f85ddcddfc5c1aede2196a0a485fc5a68baaf5a534eca73c3849f633214fc09a3
SSDEEP 384:iT2sV2Syd5lp1Eqy87tGZY60nuf5FATK3HUSOPvo5d/sX//E4K5JOoCTNac:udid5DeINPW736F/EtQo4l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Server.exe

File Explorer

JaffaCakes118_365ff339940e368785f4d48cda544710

.zip 26KB
Server.exe

.exe 109KB

JaffaCakes118_365ff339940e368785f4d48cda544710

SHA256 09104af77c40c167ef7173af0deca9a997dfc44f4ffb51eda1d0a0cd2ec2fa5f
MD5 365ff339940e368785f4d48cda544710
SHA1 66fbf3560535ed15ba008bc6655edbd842ee455b
SHA512 ad977178940ee7ec46960a72a3de7d128c0e85faa006c959652dcdb5a5b83d6f85ddcddfc5c1aede2196a0a485fc5a68baaf5a534eca73c3849f633214fc09a3
SSDEEP 384:iT2sV2Syd5lp1Eqy87tGZY60nuf5FATK3HUSOPvo5d/sX//E4K5JOoCTNac:udid5DeINPW736F/EtQo4l
MD5 SHA1 SHA512 SSDEEP

Server.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2796dd3cfae4ce2479c420784350a4786b6eaebfd3a72e0496156f9479c5c4c4
MD5 57d44ae71f6c2646bf05c3d3de230cd1
SHA1 a533e04c416968130844cbc4f4b8d4eab42304ef
SHA512 8f2228b9477ee093c3c4ed95fd06291d373df93b1e0e9eb54512752a0325e844f6243cacd8816df0135325131b80af49d6cd680144f7fd039bab7571a586825d
SSDEEP 1536:iSf6LIjaJe/4pV6XYMafMPWwrFDUVDUtDUHDU2DUGpDU:hftZ4V6IFfMPWwr5UpUhUjU8UG9U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

50302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_365ff339940e368785f4d48cda544710

Server.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_365ff339940e368785f4d48cda544710

Server.exe

mscoree

dotnet