efda70a38598b1352a65375079811728_JaffaCakes118

General

Target
efda70a38598b1352a65375079811728_JaffaCakes118
Size 2.0MB
Sample240415-akchdshd95
SHA256 1637ca544019d055dc81c8d7d97f1d5944d758547016c7043361999fddaef9a4
MD5 efda70a38598b1352a65375079811728
SHA1 1557cfec1afaa932d183b2fc074c9bb8e45d62e0
SHA512 ebc8b6bfcb371a3db63ae88a88f1ff8e2d7c7bbc1eda64004dc58520541a8a858f15decc2464338120ec82af39e986b5bd99c2c2eb59c64b1fcb5c4c0b4e8260
SSDEEP 24576:36hJXqK7s6YnFiejrt9F0TriHb3KEtCdYAAkAb/lA0xAjvAj2AAALAAADAAAeAA9:KzaK6nA8hXEWHB89
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Seoul Air Cargo SOA JULY.exe

File Explorer

efda70a38598b1352a65375079811728_JaffaCakes118

.eml 2.0MB
Seoul Air Cargo SOA JULY.img

.iso 1.4MB
Seoul Air Cargo SOA JULY.exe

.exe 927KB
email-html-1.txt

.html 4KB

efda70a38598b1352a65375079811728_JaffaCakes118

SHA256 1637ca544019d055dc81c8d7d97f1d5944d758547016c7043361999fddaef9a4
MD5 efda70a38598b1352a65375079811728
SHA1 1557cfec1afaa932d183b2fc074c9bb8e45d62e0
SHA512 ebc8b6bfcb371a3db63ae88a88f1ff8e2d7c7bbc1eda64004dc58520541a8a858f15decc2464338120ec82af39e986b5bd99c2c2eb59c64b1fcb5c4c0b4e8260
SSDEEP 24576:36hJXqK7s6YnFiejrt9F0TriHb3KEtCdYAAkAb/lA0xAjvAj2AAALAAADAAAeAA9:KzaK6nA8hXEWHB89
MD5 SHA1 SHA512 SSDEEP

Seoul Air Cargo SOA JULY.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 af9ac07263f577041536d7c65a5aa6f9609613e7565ee6167e95e18f6f2e1110
MD5 2d5bb98aafb25f28aa1f30b37364afb1
SHA1 43c653aed9c2d7ca63641453c0abc6cfad8891f7
SHA512 275a59b8e9a4141435e085b74e5b20f1d42436f0cf3c2d9f58b30ec96d3165fe820e3be2e12af85f9559cf00d9f56d80841b637b1934c01d32372ff676607ddd
SSDEEP 12288:ZUhoMJSrEXnurXBK08MdWU919swXnMFRqSO:ZI2AXnurXgJ2r9LXnMFJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

879638

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\hGGHEQRwZd\src\obj\x86\Debug\EXCEPIN.pdb

efda70a38598b1352a65375079811728_JaffaCakes118

Seoul Air Cargo SOA JULY.img

Seoul Air Cargo SOA JULY.exe

mscoree

dotnet

email-html-1.txt

Sharing

General

Malware Config

Signatures

File Explorer

efda70a38598b1352a65375079811728_JaffaCakes118

Seoul Air Cargo SOA JULY.img

Seoul Air Cargo SOA JULY.exe

mscoree

dotnet

email-html-1.txt