aec6543421c86bd2dabd570544aa3266_JaffaCakes118

General

Target
aec6543421c86bd2dabd570544aa3266_JaffaCakes118
Size 754KB
Sample240615-rdms8axbkr
SHA256 1f4a6c8c26bfc7816cec59c19392d56fd255574d25170f50e7384db1a5ff7aad
MD5 aec6543421c86bd2dabd570544aa3266
SHA1 6af9a1a57b885a7010c4c8e1212170c880568d9b
SHA512 79f4602c616f58ecf00afe21d2e3aee16eaee49b87041600465ba5d10a6124921c4ef1b5c2430f25287624d518fff8560e1fec2b4dcad10d7da3d202e041688e
SSDEEP 12288:7FwVbZVN71EFbMOoeECHOWmy0E9Rl6Qp7yKg3DvmfZG87FNiMLDEsmbUcQyBClK:apNJBijHfb9Rl6Q1yKqDOrFN5Aw1lK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Bill of Lading 849393_PDF.exe

File Explorer

aec6543421c86bd2dabd570544aa3266_JaffaCakes118

.ace 754KB
out.ace

.ace 754KB
Bill of Lading 849393_PDF.exe

.exe 1.2MB

aec6543421c86bd2dabd570544aa3266_JaffaCakes118

SHA256 1f4a6c8c26bfc7816cec59c19392d56fd255574d25170f50e7384db1a5ff7aad
MD5 aec6543421c86bd2dabd570544aa3266
SHA1 6af9a1a57b885a7010c4c8e1212170c880568d9b
SHA512 79f4602c616f58ecf00afe21d2e3aee16eaee49b87041600465ba5d10a6124921c4ef1b5c2430f25287624d518fff8560e1fec2b4dcad10d7da3d202e041688e
SSDEEP 12288:7FwVbZVN71EFbMOoeECHOWmy0E9Rl6Qp7yKg3DvmfZG87FNiMLDEsmbUcQyBClK:apNJBijHfb9Rl6Q1yKqDOrFN5Aw1lK
MD5 SHA1 SHA512 SSDEEP

Bill of Lading 849393_PDF.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1e2d1f6aa0d7209265b92faa2a4665d1906bffb20f2521134ef1fd6e87624b1a
MD5 73c2cd286f7fd036ddd063bc13625f52
SHA1 6b75d16f137ee336bed4c0bc04ce0a1edcfb735c
SHA512 67d714d339f149499cf8c7df1814d0e2091ca1932b3c1fed43df810c6ff5a484c49b8d2eaa609568b353e3c6f2f0ffca55a37d30faf43bf43aa3d057f39eb035
SSDEEP 24576:IPJU+Pdx5J0XIcfkfvizNE5EbUR7tenbuuK:IPe+V6Rcfviz5bMeu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1249902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

aec6543421c86bd2dabd570544aa3266_JaffaCakes118

out.ace

Bill of Lading 849393_PDF.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

aec6543421c86bd2dabd570544aa3266_JaffaCakes118

out.ace

Bill of Lading 849393_PDF.exe

mscoree

dotnet