e86d7e7a74ade70a2517322f13057592_JaffaCakes118 | Triage

Sharing

General

Target

e86d7e7a74ade70a2517322f13057592_JaffaCakes118
Size

373KB
MD5

e86d7e7a74ade70a2517322f13057592
SHA1

afe4d0efbc06f047a449be51acc12d304e8ff19a
SHA256

c3e498526855f562e010a1b734b56dc34a7a055ea16a49d4d511507026dea8ee
SHA512

56fea7f7891be939d7a8b7bece6ed12628048dfa2dcacb7c2bfa47bd8bc46a93a7a19d037e9b5ec2b9645f69e988acb286fc4cdaed13fd6e4bb41e2075c60562
SSDEEP

6144:op9HYQh6PokQQqpiLyI6q3kHHOObJ9qGj6twbzdphFRq9bwrein6wm1jBl5l:oprhEokjqwLd38bHqHwfhFRq9SnlgjT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SWIFT COPY 24092020_pdf.exe

Files

e86d7e7a74ade70a2517322f13057592_JaffaCakes118
.rar
SWIFT COPY 24092020_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ