33ac1abeed677145c72e052090128240_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
33ac1abeed677145c72e052090128240_JaffaCakes118
Size 360KB
Sample240511-kdbydsbf55
SHA256 b764bde02596d5b472c235c8c220d84954e0a5af8d4c5219c88ced543b1b3b30
MD5 33ac1abeed677145c72e052090128240
SHA1 40749f98558e83bab556634465af0a69dd1d7e1d
SHA512 8ec56fca76c85d81202fa1b20e8f08cf4708f0b74501336cd69154b19340225dcaa5d956ac41d0ad4356f25e7aac288016d1912f3c22f79a4bbf37fb640c19d0
SSDEEP 6144:cgHiDc5fBEVq4woFigKhPD7g5Z2xk9ae5K0FbIqQ26JAIjYLACkTmyF:c0mcWdL2PD7qJawK0pIqQ26Jbnf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NOA EVER BEING V.0885-019B.pdf.exe

File Explorer

33ac1abeed677145c72e052090128240_JaffaCakes118

.gz 360KB
NOA EVER BEING V.0885-019B.pdf.exe

.exe 665KB

33ac1abeed677145c72e052090128240_JaffaCakes118

SHA256 b764bde02596d5b472c235c8c220d84954e0a5af8d4c5219c88ced543b1b3b30
MD5 33ac1abeed677145c72e052090128240
SHA1 40749f98558e83bab556634465af0a69dd1d7e1d
SHA512 8ec56fca76c85d81202fa1b20e8f08cf4708f0b74501336cd69154b19340225dcaa5d956ac41d0ad4356f25e7aac288016d1912f3c22f79a4bbf37fb640c19d0
SSDEEP 6144:cgHiDc5fBEVq4woFigKhPD7g5Z2xk9ae5K0FbIqQ26JAIjYLACkTmyF:c0mcWdL2PD7qJawK0pIqQ26Jbnf
MD5 SHA1 SHA512 SSDEEP

NOA EVER BEING V.0885-019B.pdf.exe

SHA256 90a81b30439b28f93aedd6c172dc5caf76c2f350f6c1b11eacaedc8dc80edf52
MD5 5565e697fe031404302628fed6d0d5e0
SHA1 040e597eacf7a0d1947b4bf89d65ffbef0cbc1e2
SHA512 fbff8f182cb4de7a00560f707e0bb48bc0f2995e94ae29b88757ad905cde6ebcd8d3f152b89e8039cb3009dd2739dd817dd28f53b3f23d92fdc4eba51bec6c19
SSDEEP 12288:rmp9XVk3rNq8srw+ZdKSsWItO8n+D0s+rIJDe54KZiHKkSi:QlQNqHMWKKcAFrJCdsN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

492648

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

477KB

Virtual Size

477KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

142KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

33ac1abeed677145c72e052090128240_JaffaCakes118

NOA EVER BEING V.0885-019B.pdf.exe

generic