fd431c5a611bcd579ea5b6a5895ffbbf_JaffaCakes118

General

Target
fd431c5a611bcd579ea5b6a5895ffbbf_JaffaCakes118
Size 840KB
Sample240420-v47svsdg44
SHA256 40f64598ea5474156f785a9baf153e066c83cb52bb2caef41e001290d5b3c6b9
MD5 fd431c5a611bcd579ea5b6a5895ffbbf
SHA1 d25e0760b49c648208e9bea8be32c8b25130d765
SHA512 8cb6edee91ad2393788baf1d8cd929d2ca0522a025eb496c4801d35e23298f67cca36a200a380b9bf268db3227c44848b76c7566bd64ad36c7bc5f64e44fda3d
SSDEEP 24576:Qk/2zlK/rRsdMXqFZl9gmnSOA+8H6hmNHy:lKLFfEOqHTA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/CTM request ETA 30 July 2021.pdf.exe

File Explorer

fd431c5a611bcd579ea5b6a5895ffbbf_JaffaCakes118

.eml 840KB
CTM request ETA 30 July 2021.pdf.arj

.rar 604KB
CTM request ETA 30 July 2021.pdf.exe

.exe 931KB
email-html-1.txt

.html 2KB

fd431c5a611bcd579ea5b6a5895ffbbf_JaffaCakes118

SHA256 40f64598ea5474156f785a9baf153e066c83cb52bb2caef41e001290d5b3c6b9
MD5 fd431c5a611bcd579ea5b6a5895ffbbf
SHA1 d25e0760b49c648208e9bea8be32c8b25130d765
SHA512 8cb6edee91ad2393788baf1d8cd929d2ca0522a025eb496c4801d35e23298f67cca36a200a380b9bf268db3227c44848b76c7566bd64ad36c7bc5f64e44fda3d
SSDEEP 24576:Qk/2zlK/rRsdMXqFZl9gmnSOA+8H6hmNHy:lKLFfEOqHTA
MD5 SHA1 SHA512 SSDEEP

CTM request ETA 30 July 2021.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a3a2aeebad1531fd93c2ff210b9029f5511ebb07eb84f56bae98e8491101ba83
MD5 24bf9d46f46348a01a7a066376cab588
SHA1 90b0f98069cf5bc46a33d7d5cee7bf634249f700
SHA512 e7f2ae84459f2458291215ff0e0002d2ece5b9a5f7dba6ccbe6621833d484545de116bc2f60da59c0b5033b49bf6a71cdf6ac063128c48321a5328f7fe28599f
SSDEEP 12288:AUmdXq+nKqUyaLQZMh3AQXhI5/d/mFU9KY4rusSmlLjgp7rV/eOHyLvkfwn3E6+6:NmAQ6++3W5/d/AusjLaHmvkI3E
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

959326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

fd431c5a611bcd579ea5b6a5895ffbbf_JaffaCakes118

CTM request ETA 30 July 2021.pdf.arj

CTM request ETA 30 July 2021.pdf.exe

mscoree

dotnet

email-html-1.txt

Sharing

General

Malware Config

Signatures

File Explorer

fd431c5a611bcd579ea5b6a5895ffbbf_JaffaCakes118

CTM request ETA 30 July 2021.pdf.arj

CTM request ETA 30 July 2021.pdf.exe

mscoree

dotnet

email-html-1.txt