f8096c1b1e3cc83ecdcc58539d6b643e_JaffaCakes118

General

Target
f8096c1b1e3cc83ecdcc58539d6b643e_JaffaCakes118
Size 498KB
Sample240926-k5ehlaydnl
SHA256 85b20b341d86b43b4da52abf6a661f16ff07cf2f3b8701689fedcc3e036bd1a4
MD5 f8096c1b1e3cc83ecdcc58539d6b643e
SHA1 64ef2b5a72a1cce92fdf5f546fe8943ca1f6d365
SHA512 852c224be6cc7a85f4c5427cb607337ccf1f7a35806e68e1969e942b4679720475d21f79da4715cf1a9d40d4acc039dee88724f4f0aa967ac69aac465062e8b1
SSDEEP 12288:uoebB2KGrAPC0NrqX+zFBbE5A70lwJM75ANl1:ObB2cC0Nr8G8A7wt75AN/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/MAERSK Shipping Information_Pdf.exe

File Explorer

f8096c1b1e3cc83ecdcc58539d6b643e_JaffaCakes118

.ace 498KB
out.ace

.ace 498KB
MAERSK Shipping Information_Pdf.exe

.exe 570KB

f8096c1b1e3cc83ecdcc58539d6b643e_JaffaCakes118

SHA256 85b20b341d86b43b4da52abf6a661f16ff07cf2f3b8701689fedcc3e036bd1a4
MD5 f8096c1b1e3cc83ecdcc58539d6b643e
SHA1 64ef2b5a72a1cce92fdf5f546fe8943ca1f6d365
SHA512 852c224be6cc7a85f4c5427cb607337ccf1f7a35806e68e1969e942b4679720475d21f79da4715cf1a9d40d4acc039dee88724f4f0aa967ac69aac465062e8b1
SSDEEP 12288:uoebB2KGrAPC0NrqX+zFBbE5A70lwJM75ANl1:ObB2cC0Nr8G8A7wt75AN/
MD5 SHA1 SHA512 SSDEEP

MAERSK Shipping Information_Pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 201436245bc7a5ccba11660b260ae4361b26b2e4a301491c4f2b319f8eeb9122
MD5 457b46b043654c58320fcde48282b9f6
SHA1 74d83159033ac73479c21b8b0194fe92fd3e49dd
SHA512 92b68cd4188b2e5f357a37e9c16d1dbc0f95b238127c7ce5d08f47add2e864a6b7892181bc20fffedf43f6fde23261a7e05c864314720f58c20e81c77811784e
SSDEEP 12288:Nvln7HTM17QPFy4XEcHcMcZmf2SIMt+/gO40m2i9rwgLXWHCM2K4C:nUCxUacrZ1/gOLC9rl13C
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

589582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f8096c1b1e3cc83ecdcc58539d6b643e_JaffaCakes118

out.ace

MAERSK Shipping Information_Pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

f8096c1b1e3cc83ecdcc58539d6b643e_JaffaCakes118

out.ace

MAERSK Shipping Information_Pdf.exe

mscoree

dotnet