jaffacakes118__aed17423bce7fc6a0638bce83f9413b5

General

Target
jaffacakes118__aed17423bce7fc6a0638bce83f9413b5
Size 199KB
Sample260919-ymd11abe55
SHA256 a741d287614ab9b898a61b3c2145e536b56b2be8987b3c0556efaa033ba2cb7d
MD5 aed17423bce7fc6a0638bce83f9413b5
SHA1 3d638bfcf0570a1242bc60468893cc0714de2eaa
SHA512 ad42af3cfc9619264e0ed84717a670130e1b138cfaaeda821893d59dad57095e54e6f0cf231f30a7b1d0db656e35bb97099215e0eff79b7696923d1dde41a80e
SSDEEP 3072:aGBuI6gObyt15Y1xDDHbS7/aSzZJ5h7x4yZIpV/vUgsmfRpbYewOvo86:ayLFmxTW/PdJ5bbIpKomNO36
TLSH
T13014011BF0348056F0A500B114B61F3A6218E7732FDB48928795EB75A7289DBD0E7B6F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__aed17423bce7fc6a0638bce83f9413b5

File Explorer

jaffacakes118__aed17423bce7fc6a0638bce83f9413b5

.dll 199KB

jaffacakes118__aed17423bce7fc6a0638bce83f9413b5

IMPHASH 211a1ac2159862c6038f1d798175f2be
SHA256 a741d287614ab9b898a61b3c2145e536b56b2be8987b3c0556efaa033ba2cb7d
MD5 aed17423bce7fc6a0638bce83f9413b5
SHA1 3d638bfcf0570a1242bc60468893cc0714de2eaa
SHA512 ad42af3cfc9619264e0ed84717a670130e1b138cfaaeda821893d59dad57095e54e6f0cf231f30a7b1d0db656e35bb97099215e0eff79b7696923d1dde41a80e
SSDEEP 3072:aGBuI6gObyt15Y1xDDHbS7/aSzZJ5h7x4yZIpV/vUgsmfRpbYewOvo86:ayLFmxTW/PdJ5bbIpKomNO36
TLSH
T13014011BF0348056F0A500B114B61F3A6218E7732FDB48928795EB75A7289DBD0E7B6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

165KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118__aed17423bce7fc6a0638bce83f9413b5

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__aed17423bce7fc6a0638bce83f9413b5

kernel32

generic