a5d04840c009ef7bcf6d0d2a6c2953fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5d04840c009ef7bcf6d0d2a6c2953fe_JaffaCakes118
Size

411KB
MD5

a5d04840c009ef7bcf6d0d2a6c2953fe
SHA1

dd65af0edf4d4fcb0dca59fb8f6992fe049b0b2b
SHA256

81b1cda208cbfb14e328146497fcdda0d544f6a8fe031597a40faca6dce65be2
SHA512

d509a6498bc612833b6c24dcb94d35acb90ae47291cfed7d969a54a3d1595cd1885ed29416eb30154d77c0e0a60c28ddcb6e501b436a5133e687296bd1fd7685
SSDEEP

12288:4PpFlzuqA/v3w20p7kCQvW6Al2WHp7hzFm6bV1qjz7r:4PFuqm34BkCuruvzUCVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CONTRACT IVC 100MT DOCX.exe

Files

a5d04840c009ef7bcf6d0d2a6c2953fe_JaffaCakes118
.rar
CONTRACT IVC 100MT DOCX.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ