f80468bf0a1333bdbcc478be21b0a8f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f80468bf0a1333bdbcc478be21b0a8f1_JaffaCakes118
Size

570KB
MD5

f80468bf0a1333bdbcc478be21b0a8f1
SHA1

412ae4983d4909b55facf42cee4a2b7d88af9f2e
SHA256

ba05f14f65a44dc4d70d97e85e1627655dfaca0d2a65bccc22358ed5a3d1644d
SHA512

5e332abd928cc8b823978486acaca9e5195bc6cf7e09a4cf9e6ba13a948f21986f3ed2e5266edfdc44affcead320b2cbf34acc7d5eaa01b3fdf4019870dd3fb6
SSDEEP

12288:f6sTeooQboDz3VXqvQMTLdiOz41WsLHVvYw0xMOP:g5+oDzFXqzTLgOuWxw0KOP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/PO#21_03489 TON TRADERS LTD PO#45000 Mohamed Taha AL Qady.exe

Files

f80468bf0a1333bdbcc478be21b0a8f1_JaffaCakes118
.eml
PO#21_03489 TON TRADERS LTD PO#45000 Mohamed Taha AL Qady.lzh
.rar
PO#21_03489 TON TRADERS LTD PO#45000 Mohamed Taha AL Qady.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html