8fbd7cd0036137cee6828887a412419f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8fbd7cd0036137cee6828887a412419f_JaffaCakes118
Size 464KB
Sample240602-2zzd9aac41
SHA256 f7d1c497fa22ec8d6269631c1274081b3043ac24efd1312add8566215ba8dcb0
MD5 8fbd7cd0036137cee6828887a412419f
SHA1 70bc8cda321863c081f3c51d9e0d5f476f85680e
SHA512 23cd2e7856dcca4ff9abf3d148ef83ee84d87fc60ebb015048a2c1c5da7c009a5485d20dd7b7aaad50c23d5a13895218c229272d53191a1bcda37d5d47d1d421
SSDEEP 6144:Z7xpW+28szFoGG9j/LMAONnw6f85Q9wSMMvhJLRTfEKOUQf42kkqWLLFlWWLbGUo:dxsk9jTTmH829BrTfxOUNoFx9PmDELy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order scan docx.exe

File Explorer

8fbd7cd0036137cee6828887a412419f_JaffaCakes118

.rar 464KB
Purchase Order scan docx.exe

.exe 886KB

8fbd7cd0036137cee6828887a412419f_JaffaCakes118

SHA256 f7d1c497fa22ec8d6269631c1274081b3043ac24efd1312add8566215ba8dcb0
MD5 8fbd7cd0036137cee6828887a412419f
SHA1 70bc8cda321863c081f3c51d9e0d5f476f85680e
SHA512 23cd2e7856dcca4ff9abf3d148ef83ee84d87fc60ebb015048a2c1c5da7c009a5485d20dd7b7aaad50c23d5a13895218c229272d53191a1bcda37d5d47d1d421
SSDEEP 6144:Z7xpW+28szFoGG9j/LMAONnw6f85Q9wSMMvhJLRTfEKOUQf42kkqWLLFlWWLbGUo:dxsk9jTTmH829BrTfxOUNoFx9PmDELy
MD5 SHA1 SHA512 SSDEEP

Purchase Order scan docx.exe

SHA256 338cf264cdcfcb55aa87ce515e30a48a5cf8cc5d67e5ef6dc1ce85541b34a4e0
MD5 77cfb4ed4037d5ec1fdc3e18a0b146bb
SHA1 62e9de63146e3d0ceeefe020750abaf2b794e94e
SHA512 fe179187b3844d0444f8e84ef3b58ee265dffb77c716117833cb789a45bc44a442e5d8c1549295810a03b0cbfabb440f3d783436db50daf69fb811d803e4a9f0
SSDEEP 24576:l6ZN7hiFzbIBKJZ0AqgtTqyY6Tqe3GnO1:l69+fEIcggyYef3l
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

583792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

566KB

Virtual Size

566KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

262KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8fbd7cd0036137cee6828887a412419f_JaffaCakes118

Purchase Order scan docx.exe

generic