Overview

overview

6

Static

static

6

Grouped.pdf

windows7-x64

3

Grouped.pdf

windows10-2004-x64

3

access.exe

windows7-x64

3

access.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e0987ecfc1fd5a05266b4493cb5e248_JaffaCakes118

  • Size

    217KB

  • MD5

    2e0987ecfc1fd5a05266b4493cb5e248

  • SHA1

    80b7d1dbaa2d870b502fdd647ffa5965096fb377

  • SHA256

    f4d292e67e54cc6e3fda16bbe4a734ddfe8f938f4e55f900dc5f7fc9655d7a96

  • SHA512

    4fcbb1788c00130519dd941fadd6b5a713facc8657978b64d3d9a248b9ed4aa8f1016565316e9b729457cd0fd36538da34664ae952bc0572d18a5dc7dc129443

  • SSDEEP

    3072:vqnP4VAXDPaRxwyWkx7vQc3YtdBTec4/D/ItA0x1hJi0obo69ajT3yf2:mPgdRSy1xcMYzBiZ/rghEVborTCe

Score
6/10
pdfevasion

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

    pdfevasion
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e0987ecfc1fd5a05266b4493cb5e248_JaffaCakes118
    .eml
  • Grouped.pdf
    .pdf
  • access.exe
    .exe windows:4 windows x86 arch:x86

    6a38c3e645463a24bd5414af59483560


    Headers

    Imports

    Sections

  • email-plain-1.txt