157da6effe1931be4dc4a6bd35020fa6_JaffaCakes118

General

Target
157da6effe1931be4dc4a6bd35020fa6_JaffaCakes118
Size 1.1MB
Sample240505-ch85paee28
SHA256 b0c4a7e65bfc48a683c26dcbe952937e10bca231df8a17d16fab0312afb13345
MD5 157da6effe1931be4dc4a6bd35020fa6
SHA1 43e80cb41f7864b9c713a51a31732f76d744b7fd
SHA512 b7f9fd846433fe20690466d1d730e30ff21a1bc5300b7b217c3e7ea5e86563977869d6508ee9902ffe26acfd581e368ca6e7ba35c9059cad27fa2c980a647c21
SSDEEP 24576:0HLGSf0H0AZ/RBrmUwQgx1e2AnGEdiLAIi:usUCqQiepdi0Ii
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Inquiry List.pdf.exe

File Explorer

157da6effe1931be4dc4a6bd35020fa6_JaffaCakes118

.zip 1.1MB
Inquiry List.pdf.exe

.exe 1.7MB

157da6effe1931be4dc4a6bd35020fa6_JaffaCakes118

SHA256 b0c4a7e65bfc48a683c26dcbe952937e10bca231df8a17d16fab0312afb13345
MD5 157da6effe1931be4dc4a6bd35020fa6
SHA1 43e80cb41f7864b9c713a51a31732f76d744b7fd
SHA512 b7f9fd846433fe20690466d1d730e30ff21a1bc5300b7b217c3e7ea5e86563977869d6508ee9902ffe26acfd581e368ca6e7ba35c9059cad27fa2c980a647c21
SSDEEP 24576:0HLGSf0H0AZ/RBrmUwQgx1e2AnGEdiLAIi:usUCqQiepdi0Ii
MD5 SHA1 SHA512 SSDEEP

Inquiry List.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 17f9b526e5aa96416862611bfa6ab84396209a3df8bb5b723240e8a57dc6d0e9
MD5 89a2e99f3a510475dfbb36e7492967e9
SHA1 d51a45a4041951b84df7bb9bc08bd9dacb469015
SHA512 171fe1bdfce0515372fffafde37e3906a5fb7325dfe24861c71d0f1c8cc6556b6e81194bfe175a7595ca73ac169b9038460500706c53982ff87a7b047041c40d
SSDEEP 24576:7ENXVpmPIXFp2Q3tnL0qb1szI4xIIrBB+XVpmPIXFp0iz:2VgPIXFU69uzI4xIY2VgPIXFh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1562430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

157da6effe1931be4dc4a6bd35020fa6_JaffaCakes118

Inquiry List.pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

157da6effe1931be4dc4a6bd35020fa6_JaffaCakes118

Inquiry List.pdf.exe

mscoree

dotnet