2f6155414dfd64f50914febe39bf536c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f6155414dfd64f50914febe39bf536c_JaffaCakes118
Size

55KB
MD5

2f6155414dfd64f50914febe39bf536c
SHA1

bdb572c41b4c800f112a3eff83b7b921cef43018
SHA256

c0a771e7f8388a0d71ed45482a2c29089cb0a8b1d6014290b248e3090e9f2bac
SHA512

10504370da46faaa3568170fd83fb5c373dc99ea46733df46fdb26d3b892c9bcf2ffe95aff4c81c808234ed2429b3aa6536f274f5bde069dd0d37e9520e32b61
SSDEEP

1536:46vadoQlweUzYJjK6AN5cFzhC4M8wrA9qfMv:46yqeU0Jl1FVX6A9qfA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Rechnung.exe

Files

2f6155414dfd64f50914febe39bf536c_JaffaCakes118
.eml
Buchung.zip
.zip
Rechnung.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
email-plain-1.txt