5f529015491d78d37ebd092ba0d94f43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f529015491d78d37ebd092ba0d94f43_JaffaCakes118
Size

473KB
MD5

5f529015491d78d37ebd092ba0d94f43
SHA1

ebf6c3f121e71b27a17eb3a8c5696171b29820dc
SHA256

0946fbe35bf360b6bbf9c6f32f0ad0e3630135daf698b64158c3a8a3d5dcf192
SHA512

06b62e6d2574212b4504e815c4c544693ac25a19f7d8da9fcfcd83d54730d143d10ab733a98f9b9ba1188d1ad869932b3a685b4ca8338bc69f028521ba2d97e8
SSDEEP

12288:ruRh7MepxFx5nLegjut+LTs5AbXqqaN7DAuR1:ruRh40Fx1ru8LTsWBYfHR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proforma Invoice pdf.exe

Files

5f529015491d78d37ebd092ba0d94f43_JaffaCakes118
.zip
Proforma Invoice pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ