9bd65f5fc591c0534aae2627fe9cdeed_JaffaCakes118 | Triage

Sharing

General

Target

9bd65f5fc591c0534aae2627fe9cdeed_JaffaCakes118
Size

429KB
MD5

9bd65f5fc591c0534aae2627fe9cdeed
SHA1

79da220819cec1de19ab552dc07b229254d216b6
SHA256

ab18c8cbfed8cd23bbf8c1c55e03e85888084cf6bff6a7e0dc789c40a725997f
SHA512

55e60c0407366cdce36652c820a060fae821d6f313edf481bc5b1cf88da198710b47bbbabee13402425d0193425d7746fe6aeaf611cf5ba45d60b73877fa9d06
SSDEEP

12288:fCAYi3RDZRkbM7weZnPL1uRxA3h+M5zdOb:RYENRkbMESnvR5JdOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment slip 95201821027.pdf.exe

Files

9bd65f5fc591c0534aae2627fe9cdeed_JaffaCakes118
.rar
Payment slip 95201821027.pdf.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ