acc4fdc0e6c701455ee76253ebf158b1_JaffaCakes118 | Triage

Sharing

General

Target

acc4fdc0e6c701455ee76253ebf158b1_JaffaCakes118
Size

697KB
MD5

acc4fdc0e6c701455ee76253ebf158b1
SHA1

14636cebb0ab1511d2313073ef4ad46ad26966d4
SHA256

8b0ac881b039733c573ab30cf037e0ce3d6f2981c0eb2342902b91ecf891adff
SHA512

ba128fe1f8aa01f14c1e5cd84356add17144163ca8671e5a0c2f211e70dd7870450141e0283faf0c106aa07c602ee4a2191f5e01df9770881de170a83584daa9
SSDEEP

12288:x3w06WBnXs2czL/iu2cgassc+1kt6ZyigJbG04P2aULzf7XI+euRlXKDx5C+rZ3U:xHTBsph/X1uoJD72Lf0+eUlXKV5C+FU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/SKBM-120821.exe

Files

acc4fdc0e6c701455ee76253ebf158b1_JaffaCakes118
.eml
SKBM-120821.rar
.rar
SKBM-120821.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 630KB - Virtual size: 630KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html