03edd9089e8b4ae765b00bcd4c0a32c4_JaffaCakes118

General

Target
03edd9089e8b4ae765b00bcd4c0a32c4_JaffaCakes118
Size 1.1MB
Sample240622-1ffblavemg
SHA256 ec0cfb683c86b7c46ca9f58ff374f9623381b8899bb515ea780d072937449055
MD5 03edd9089e8b4ae765b00bcd4c0a32c4
SHA1 34d8bb65924bfd5714ee29da6248b76074ebcb79
SHA512 2545b5d833e47aadd987e852a38bc2899faf80043e8fb764a8b7d9bc446e28f69dd3eb15f8b4b087cd04ee6d4c80722a221a5a2c3801d887a572f218b1fffd04
SSDEEP 24576:TA7DADNj8mbb0FRlYp5qGPZ+BtLiy5suzq+1hwhEP5Zk05bo+Jb1w:TA7DADB84b0FDy5X+BD5nzqq2EZBo+J6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order_pdf.exe

File Explorer

03edd9089e8b4ae765b00bcd4c0a32c4_JaffaCakes118

.zip 1.1MB
Purchase Order_pdf.exe

.exe 2.8MB

03edd9089e8b4ae765b00bcd4c0a32c4_JaffaCakes118

SHA256 ec0cfb683c86b7c46ca9f58ff374f9623381b8899bb515ea780d072937449055
MD5 03edd9089e8b4ae765b00bcd4c0a32c4
SHA1 34d8bb65924bfd5714ee29da6248b76074ebcb79
SHA512 2545b5d833e47aadd987e852a38bc2899faf80043e8fb764a8b7d9bc446e28f69dd3eb15f8b4b087cd04ee6d4c80722a221a5a2c3801d887a572f218b1fffd04
SSDEEP 24576:TA7DADNj8mbb0FRlYp5qGPZ+BtLiy5suzq+1hwhEP5Zk05bo+Jb1w:TA7DADB84b0FDy5X+BD5nzqq2EZBo+J6
MD5 SHA1 SHA512 SSDEEP

Purchase Order_pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e74d8a9446cc29fe3cc0502ab4df804c265761e5529966f5702ff4690031225c
MD5 06ddf95fce6d18a63fb14c35d2ee791a
SHA1 fe032bdf3108536a9d7ccc2cb939012884249dd0
SHA512 d251cae79c934e864eaef2fb87c0eca2ee1af14e42edb3d46a8c012394377ce54b279c707fb0d0f9de7d8b632f67ebbd7fd8daae91b764ebe150b56a9f646e88
SSDEEP 49152:d7oZ0ajbQzlq5O+l4QOnn8jeX+l8uvlhfNf5lWLPNyeL9+hw/USGy7Xk/51HwgGV:uX0zlC6me98Y5Q1a7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2798590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

03edd9089e8b4ae765b00bcd4c0a32c4_JaffaCakes118

Purchase Order_pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

03edd9089e8b4ae765b00bcd4c0a32c4_JaffaCakes118

Purchase Order_pdf.exe

mscoree

dotnet