b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118
Size 397KB
Sample240616-s8lebatbkn
SHA256 ba3184ff89a53d568a7897d9394e6475b51642f3c0721f61450d420f5be38b5a
MD5 b44e81afa12a5f33f39b5ee3c797a5bf
SHA1 02c3e90888a0436d9f680fe6eb6001a418314c06
SHA512 1a2711738d7f5e528dc94dde79174a80e88459b28f8963ff161b1366d7a1caf0abd20d7ba4d8ea5f3fa06a6c181fb893c0513b05d7d188b4d7ba31a98fd4ef32
SSDEEP 12288:GswzMuFyDl0Gzr+AZQ6DmN/O+2HH7Mg/t2MAcMfZ:GHjFyDQcB7Mg/iZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION_PDF.exe

File Explorer

b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118

.gz 397KB
QUOTATION_PDF.exe

.exe 738KB

b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118

SHA256 ba3184ff89a53d568a7897d9394e6475b51642f3c0721f61450d420f5be38b5a
MD5 b44e81afa12a5f33f39b5ee3c797a5bf
SHA1 02c3e90888a0436d9f680fe6eb6001a418314c06
SHA512 1a2711738d7f5e528dc94dde79174a80e88459b28f8963ff161b1366d7a1caf0abd20d7ba4d8ea5f3fa06a6c181fb893c0513b05d7d188b4d7ba31a98fd4ef32
SSDEEP 12288:GswzMuFyDl0Gzr+AZQ6DmN/O+2HH7Mg/t2MAcMfZ:GHjFyDQcB7Mg/iZ
MD5 SHA1 SHA512 SSDEEP

QUOTATION_PDF.exe

SHA256 d98f8380522e71c61b91d1fbdf98c0528fc20388a85695529824754f00a183a1
MD5 a02b91f070073c6dd77d511470a1d5b6
SHA1 f22977adb6f742cbd01b42d137665f7a9fceb71a
SHA512 0dfc6c4b776e7a4c5a8860b490a6cb2c51884697c9647add2f8ed1b792b838399f16171198af8058277adb83ab52abe77b10d472209a6fd471cc4d597d280ee8
SSDEEP 12288:nn3nwBeZBUPtcUoJ2JIuDhvVnzcpI0ZHbMF281nc5W5:3nLZiPt42JIudVwFZbZ81ci
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

465236

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

450KB

Virtual Size

450KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

94KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118

QUOTATION_PDF.exe

generic