3dca0bef1adefc95c7785bf1a31785fe_JaffaCakes118

General

Target
3dca0bef1adefc95c7785bf1a31785fe_JaffaCakes118
Size 232KB
Sample240729-kqmwesvbpg
SHA256 1783cab38631bf2258e78dedfb3669c9a6cd4fff79b57fe50ce47f3f788f6390
MD5 3dca0bef1adefc95c7785bf1a31785fe
SHA1 1f5ecaecadd6a8cf327fd6ee6b9ae7e0855ef366
SHA512 c05ac29b8fdbde1857e3525c0915c5a661241bc3b3f452247e04ca8b5e7b07ed2a446c3d2ed043778bce7782abc827cc30d729600039900a43b8a520dc7e5231
SSDEEP 6144:j7/5pgOT8yGxriYa5InYqeEVeaQSThW2ZxmSHMV:j7hpgOotS3hEMtShWYxDsV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Slip.pdf.exe

File Explorer

3dca0bef1adefc95c7785bf1a31785fe_JaffaCakes118

.zip 232KB
Payment Slip.pdf.exe

.exe 286KB

3dca0bef1adefc95c7785bf1a31785fe_JaffaCakes118

SHA256 1783cab38631bf2258e78dedfb3669c9a6cd4fff79b57fe50ce47f3f788f6390
MD5 3dca0bef1adefc95c7785bf1a31785fe
SHA1 1f5ecaecadd6a8cf327fd6ee6b9ae7e0855ef366
SHA512 c05ac29b8fdbde1857e3525c0915c5a661241bc3b3f452247e04ca8b5e7b07ed2a446c3d2ed043778bce7782abc827cc30d729600039900a43b8a520dc7e5231
SSDEEP 6144:j7/5pgOT8yGxriYa5InYqeEVeaQSThW2ZxmSHMV:j7hpgOotS3hEMtShWYxDsV
MD5 SHA1 SHA512 SSDEEP

Payment Slip.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 985fb6bd28653c5012113b096e61bebb49fe5aeeb53c7a128d323803637cf6cd
MD5 fd6e85afa80f7c36795bc58dc4d1fa86
SHA1 419dd6e6e6a1a6753ca51e1612ea6bc61a011d48
SHA512 9d9279ddb6e3988371a7ca714ade52e4983eb7df7c3e6bdf322e530c44c730b8b43f4bb943800c842ee4b54bcdbf3341be066a05bdd4fa72e4e2b69db05c3a01
SSDEEP 6144:UhntRj86y2xrIYaHInYgeEVgaQSTxU2ZxmSHM/:KntR5tQtvE6tSxUYxDs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

298774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

3dca0bef1adefc95c7785bf1a31785fe_JaffaCakes118

Payment Slip.pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

3dca0bef1adefc95c7785bf1a31785fe_JaffaCakes118

Payment Slip.pdf.exe

mscoree

dotnet