Overview

overview

10

Static

static

3

BOOKING.PDF.exe

windows7-x64

10

BOOKING.PDF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0a0aa2a540745ef974c3e40eab6999e4c837692c17f582346a9eb39f6c64e7af

  • Size

    552KB

  • MD5

    3692fa57f36c4026776b3884733128ac

  • SHA1

    2cb30949c6292a98ac18e319ea6469a5d35dfa20

  • SHA256

    0a0aa2a540745ef974c3e40eab6999e4c837692c17f582346a9eb39f6c64e7af

  • SHA512

    aeb45400629df409e8e0ade2c242469d4995ca466511514cc921eddc6e5f254bc354ea303f352ab90b74c88afe9df20e10e70ed7624667fed67a05f4da25528b

  • SSDEEP

    12288:qlRvwzi1+alSv2ozOvSY2TYrNq79T3CAUMFPwuZoX5CRZO/a66:qwSHoy92TYxo3CMFPwjX5CKO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_0a0aa2a540745ef974c3e40eab6999e4c837692c17f582346a9eb39f6c64e7af
    .zip

    Password: infected

  • BOOKING.PDF.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections