General

  • Target

    b565d44e6747f50e6e59d6f0ca58e91e_JaffaCakes118

  • Size

    98KB

  • MD5

    b565d44e6747f50e6e59d6f0ca58e91e

  • SHA1

    1fde20e8c2fda472c0f0073c9524d0c03157e9cc

  • SHA256

    e4ff051fdf41fa2c0296292a0bd5939f22f49cdb58b25e6d38502e55778a3397

  • SHA512

    5efc8e6c3e8b21bfbff869b527f4fed8c70ba7fe31addd9d8d5500635089e848c9efed2c065ff888a48df0d85ac915eac748e5b76de07ca9527471afaa6bd027

  • SSDEEP

    1536:pce3fxDX8O0EB/E0nt9P7ujs7n3zVniRUjO51JeU36Eb7cgH1y3Q:jDX8yEetRCg7YRUjGbIgH1yQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b565d44e6747f50e6e59d6f0ca58e91e_JaffaCakes118
    .eml
    • http://www.nsbs.bg/

  • Project Booking No. 20009500.gz
    .gz
  • Project Booking No. 20009500.exe
    .exe windows:4 windows x86 arch:x86

    462f3a0d27b2b545ff81f0f275cb819b


    Headers

    Imports

    Sections

  • blocked.gif
    .gif
  • email-html-2.txt
    .html
  • email-plain-1.txt