04a83a27910bb38a273f9931e4b3f427_JaffaCakes118

resource
unpack003/Orden de compra # PO211021-01.pdf .exe

SHA256 7a2897fef479e95701e2bad18c6fe77b5015d3ce8238b754c6be142a54fe3348
MD5 04a83a27910bb38a273f9931e4b3f427
SHA1 6d201cd44dc7603b62d9fc2ac59a8fc1004fd24d
SHA512 b5d8b758e77adcccb32e5673c81fbc8a3f1b284a91f7fda80d9177a680b686ed3bd79493f89a1a80b4a7a13374d9c3fefab104d72363fdfe517c0c2906477f1b
SSDEEP 6144:1TTu4itWvP8ZsgJxLIIVUr1vwAtx/ln11FfVynbrEFTs7:ytWH8egJp/VGhtxdVdI
MD5 SHA1 SHA512 SSDEEP

attachment-2

SHA256 8ab52ee6bac83390b733adc36e66b647cbeb9ca2c18596ca2a14927a7dcabc4f
MD5 5ab49c6f0c90e1719c4dea2519f86ef6
SHA1 2fd8890874f927e6affee306f86c58eb53febec7
SHA512 80bc810e8315cc4a5f5f5906fd9f5a514083e0e92119f49b1632588d70af23de38bcd3e24a0390fe5435c46807dc3141686fb6a9730154d629c320306d704e8b
SSDEEP 6144:44itWvP8ZsgJxLIIVUr1vwAtx/ln11FfVynbrEFTsH:OtWH8egJp/VGhtxdVdu
MD5 SHA1 SHA512 SSDEEP

Orden de compra # PO211021-01.pdf .tar

SHA256 471d76d2d9da06a18e3a9d2bc3c02937c5224431a797c1a24519e6d48b0f2361
MD5 a501da33fbbc0bcc2f73b5c52d13d3f3
SHA1 0c1e8421b73eb30eaafc6211b7d6bcb8ad8458a5
SHA512 a0f7217dfbd8c0a6d59970c01bf24453954bdb92a7c7658b8ed78cc9646235e08e23abb94e3c3ddd1c1531490375617d66594eed7a1ef723ad02d3921cf18bf5
SSDEEP 3072:Zm0HTBMgbj7jX0nHIx/H0kY7amEExFaNCq1Nou+imUv6R3DrJKOZDDttS:ZxuWjvX0UkwGFaNfou+QCtDVZtS
MD5 SHA1 SHA512 SSDEEP

Orden de compra # PO211021-01.pdf .exe

IMPHASH 79769bf6868dc11b056a4541de90d1fa
SHA256 95c8860cd123f91b6ec65345fd59994acfa374df4a4fb89b73d57c1040b4e5a6
MD5 653c45052385b5bad351581806de4f38
SHA1 f6adc865cc361073fe55b81417d24f38438b4add
SHA512 2f5eca2518f640956d9c3ce554e4d524606a97bdf4b5536cee99f9e5eddb142da33ea5fd340888dc386e226887ec1a58fc5d9aec5870ccafa47eda43b2382660
SSDEEP 3072:W5aBMTi5rfeKYuIdC1xfHhXkEMKqau42Wdf+CNf4/AWaSkSJu98vd:PMTi5rG3S1pHhLfN2Wd/IADG8el
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xazalon\yoh.pdb

kernel32

SetEnvironmentVariableW GetEnvironmentStringsW FlushViewOfFile ReadConsoleW FindActCtxSectionStringA CreateActCtxW GlobalAlloc Sleep InitAtomTable HeapCreate FindNextVolumeW WriteConsoleW GetAtomNameW GetModuleFileNameW SetConsoleTitleA SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW ResetEvent LoadLibraryA GetModuleFileNameA CreateIoCompletionPort GetProcessShutdownParameters GetProcessAffinityMask GetCPInfoExA Module32Next ReleaseMutex EndUpdateResourceA GetVersionExA FindNextVolumeA lstrcpyW LCMapStringW SetTapePosition HeapReAlloc HeapSize GetStringTypeW EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapAlloc ReadFile EnterCriticalSection LeaveCriticalSection HeapFree IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar RtlUnwind RaiseException SetStdHandle FlushFileBuffers CreateFileW

user32

ClientToScreen

gdi32

GetBitmapBits

winhttp

WinHttpSetOption

email-html-2.txt

SHA256 7192dc595c6510d3912e341d270238e43549ddc9fdf7a1a61dcd573a0246b46b
MD5 1f681862d61ffdc0c2f2bec053bf1ad4
SHA1 3c02289316dc3f359e79bc121b50cd3ce5c81101
SHA512 b8b5d2227b0c0c9bfb1140c1a781acaddac2b8fed7bf480a8d2a675240f36c9449bde98087ad38e19c6efb110ea9e095329a5d55d415e5d88b429ea6d737ab5c
SSDEEP 96:jSJE+jSJkjSJLjSJOljSJkjSJi0IKSJkjSJijSQgU+jSQDdddYU+jSQF7zU+aSJd:jD038J93i3FYWXEcneC+L+gsbF
MD5 SHA1 SHA512 SSDEEP

email-plain-1.txt

SHA256 f65f596b612ed8974e1b63af263f71da5a87d477a9c7bffa45685fd753f00783
MD5 871280e1e9bddd9bac0f2d9466a7e8cb
SHA1 a1b9791697e40fa12810349a397b0a98a8d58f1c
SHA512 b09059ed01c3a0f56aad67863f8e6b284e6dbc5beedd3ee93dc251a9c3f2c7dd45cc3a42e6b305c3eb260215d957fed1ddea307d43959750480b2ed8a5417202
MD5 SHA1 SHA512

email-plain-1.txt

SHA256 57c839c0d69f71c9605f5768ea796169ee2bbb6584cbc7d826e7ee0d2a96ce90
MD5 eb65290b718d1d667899f70ba7d9939d
SHA1 b185e89cd9f7fc3210e4a893bd611630fb8e1908
SHA512 4226a8b94b6812329af176b857397241264f36059aebd563128c29c3d9bfbe757b079f4c25b26b27382c8af8964921f3f955a4c64165020577d18c81239e249d
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer