fdd5ba8d8dda53e854dfa6ee318aee85_JaffaCakes118

General

Target

fdd5ba8d8dda53e854dfa6ee318aee85_JaffaCakes118
Size

2.0MB
MD5

fdd5ba8d8dda53e854dfa6ee318aee85
SHA1

b3f9c35149014e30b75337811d6e39089c1887b4
SHA256

104970979a3977fd54b367cba56e0fbebd96522c7daa610ab0f2c2556af0de5b
SHA512

97d72969412ae5a5de23ac64fea5af5ad0d574701eb86815953c43e5875aebe5d1c33887502cc2d69c75c0013f243af3bf45e79784646936f9b4817a947cce20
SSDEEP

12288:RoQEiiZaJvrGkfkQkOM2LIZ6W8OsSM9TRPnb8N6jMiVgp9FdMnPo26TYrduEmY0i:qhgvrALOpybWLb80oWgp9iwg5Lc/hO

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/New Order Offer PO-8122021-753/New Order Offer PO-8122021-753.exe

fdd5ba8d8dda53e854dfa6ee318aee85_JaffaCakes118
.eml
- http://www.stertechpump.com
New Order Offer PO-8122021-753.img
.iso
New Order Offer PO-8122021-753/New Order Offer PO-8122021-753.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 884KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html