4e07df2c057c3f144decf9af3409c471_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4e07df2c057c3f144decf9af3409c471_JaffaCakes118
Size 340KB
Sample240729-sgdkdstfnl
SHA256 a43336d3a04f84125f7603032b543cdb794fe98f2b3e44dca0c3f241a83abc79
MD5 4e07df2c057c3f144decf9af3409c471
SHA1 8de9e8419666b5d1dc979964eaf0eea349a527f5
SHA512 7c1b5a85b46f420fe7adb0ac0de67e37032171b6b9003624cf954dc87cc9161aeff9491ba95709e570d5dcbcfd2b17bd8b3592624513f9e71f9ea0c80bd5ad91
SSDEEP 6144:wsojWjOtOXNkh1nEOyW6aHnnGtNPUJk9nKUy//NnFxU/7ReFUD:wseOXSfdZHn6umnKX/VnueFO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice-MAJW-18-06-2020.PDF.exe

File Explorer

4e07df2c057c3f144decf9af3409c471_JaffaCakes118

.gz 340KB
Invoice-MAJW-18-06-2020.PDF.exe

.exe 573KB

4e07df2c057c3f144decf9af3409c471_JaffaCakes118

SHA256 a43336d3a04f84125f7603032b543cdb794fe98f2b3e44dca0c3f241a83abc79
MD5 4e07df2c057c3f144decf9af3409c471
SHA1 8de9e8419666b5d1dc979964eaf0eea349a527f5
SHA512 7c1b5a85b46f420fe7adb0ac0de67e37032171b6b9003624cf954dc87cc9161aeff9491ba95709e570d5dcbcfd2b17bd8b3592624513f9e71f9ea0c80bd5ad91
SSDEEP 6144:wsojWjOtOXNkh1nEOyW6aHnnGtNPUJk9nKUy//NnFxU/7ReFUD:wseOXSfdZHn6umnKX/VnueFO
MD5 SHA1 SHA512 SSDEEP

Invoice-MAJW-18-06-2020.PDF.exe

SHA256 2dd2cafba54d0f7610c085a225debb2297cbe70d95b65833f85a0d62cfda6a87
MD5 7d3cd87b7ae39c73b72ede9413d7f2e2
SHA1 d3f5aa9426b5ba1eaf0a79986bb2336bdc03f07c
SHA512 e3d21ef61bad84ab5a852dc707af444214110fc85508ce9ee79c74cfe2a5845866f615852875b6c7c2caa90a16869a777ac67063bb2736a1333522bd124721df
SSDEEP 12288:EBRcXM3Uc4yEUdqhfwxgcQYRpS3hF6vbYfHFJsAicpr:oUBcxqhffV2vbWHFJ9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

384432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

371KB

Virtual Size

371KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4e07df2c057c3f144decf9af3409c471_JaffaCakes118

Invoice-MAJW-18-06-2020.PDF.exe

generic