Overview

overview

3

Static

static

3

RFQ_QUOTE_PDF.exe

windows7-x64

3

RFQ_QUOTE_PDF.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5183694cedceb8fa9fe200fe402e37c_JaffaCakes118

  • Size

    331KB

  • MD5

    f5183694cedceb8fa9fe200fe402e37c

  • SHA1

    59248d979e89d97c678a02af10224491e6a7d023

  • SHA256

    ba8d9f9c27cade54fa40af0be36c74f3b159fad7e06f6b0d2edf3a78068442fc

  • SHA512

    5580ed186ca5db4cda05ee814a27f683e724de8b8e393321843a2316f718322584704d15d8f0b16f937aed90bb1b0785e0a4448ba5d52f8815136479b4e0dd29

  • SSDEEP

    6144:BQoWFjM3TCrQPDRPYS0hwPcH48SdxwB/LnBmL20LOX6WwfRc:uFjM35DRASFPcH48IxunBmO6D5c

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f5183694cedceb8fa9fe200fe402e37c_JaffaCakes118
    .eml

    • http://www.kyong.co.kr/

  • RFQ_QUOTE_PDF.rar
    .ace
  • out.ace
    .ace
  • RFQ_QUOTE_PDF.exe
    .exe windows:4 windows x86 arch:x86

    98b3eef9cdeaf58a9da8ee51eccb10fb


    Headers

    Imports

    Sections

  • email-html-2.txt
    .html
  • email-plain-1.txt