jaffacakes118_comp[.]cab

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_comp.cab
Size 1.5MB
Sample261011-th496sch47
SHA256 d62c94558a2e165ae11c2e585af722bf8845f59a1483b677b924360b502b8293
MD5 c3917c41a19bde891ccefe563b1871f9
SHA1 61749af4b5d0b77bfafcf31abc85682027ee72a0
SHA512 366c6527586bd9ad1469289102dfaf9339b6e1e798468032de92d959799792c91b6b63a35715ff4ec33a1e2306d2f36a31cc31ab3819077e680ff8f6a5636a84
SSDEEP 6144:3pwnCVopP5D192eEM4b0UZf+TbtPbKPwfUfSh9fypb:in/tVipMCZ2ntPmfSh9qb
TLSH
T19A756360937638D8EF63A1BFA0BD0FD19005B1E56458EA2B77796BF05A9031F24A6C13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/comp.exe

File Explorer

jaffacakes118_comp.cab

.cab 1.5MB
comp.exe

.exe 715.0MB

jaffacakes118_comp.cab

SHA256 d62c94558a2e165ae11c2e585af722bf8845f59a1483b677b924360b502b8293
MD5 c3917c41a19bde891ccefe563b1871f9
SHA1 61749af4b5d0b77bfafcf31abc85682027ee72a0
SHA512 366c6527586bd9ad1469289102dfaf9339b6e1e798468032de92d959799792c91b6b63a35715ff4ec33a1e2306d2f36a31cc31ab3819077e680ff8f6a5636a84
SSDEEP 6144:3pwnCVopP5D192eEM4b0UZf+TbtPbKPwfUfSh9fypb:in/tVipMCZ2ntPmfSh9qb
TLSH
T19A756360937638D8EF63A1BFA0BD0FD19005B1E56458EA2B77796BF05A9031F24A6C13
MD5 SHA1 SHA512 SSDEEP TLSH

comp.exe

SHA256 c7bf441bd19cfe03a5b3ef6a43dec4fb907a15bd835c1348e5b850b00f73e0cc
MD5 f33d71047f4901adde7c5bf159493454
SHA1 11cb0d5c78db88626acbae626ec54f714a2ce7bd
SHA512 afd83d277bab0f11adc95b713be0a9f6328b3c678090504427c205f9a63cbfd31ea83cf841c89dbc24b065b08f88d63a349a418b24bed90b349df92c0d22a19f
SSDEEP 6144:U7Xu0u2ZYkfF6DGdTSBlT7klW26EfNtZK9457oozfq/Diyk:8XuQqkfFzdwTAl1Nm94X2r
TLSH
T1EE79E0D325F00A7BF02DADB95D274A67E058BD7426A634C326DE0B4CDA255FC8E0618F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

477356

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

463KB

Virtual Size

462KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

636B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_comp.cab

comp.exe

generic