b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118 | Triage

Sharing

General

Target

b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118
Size

397KB
MD5

b44e81afa12a5f33f39b5ee3c797a5bf
SHA1

02c3e90888a0436d9f680fe6eb6001a418314c06
SHA256

ba3184ff89a53d568a7897d9394e6475b51642f3c0721f61450d420f5be38b5a
SHA512

1a2711738d7f5e528dc94dde79174a80e88459b28f8963ff161b1366d7a1caf0abd20d7ba4d8ea5f3fa06a6c181fb893c0513b05d7d188b4d7ba31a98fd4ef32
SSDEEP

12288:GswzMuFyDl0Gzr+AZQ6DmN/O+2HH7Mg/t2MAcMfZ:GHjFyDQcB7Mg/iZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION_PDF.exe

Files

b44e81afa12a5f33f39b5ee3c797a5bf_JaffaCakes118
.gz
QUOTATION_PDF.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ