Overview

overview

10

Static

static

5

order pdf.exe

windows7-x64

7

order pdf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_91a4767026536af44716798ffc7149f1754c44f84c67bc6a237e03e4a0398d5b

  • Size

    1.1MB

  • MD5

    c5ef57f9e112e4e9254a307cafc5b71c

  • SHA1

    a5d53c9bec3e8e05fac84cea2248af8049301b26

  • SHA256

    91a4767026536af44716798ffc7149f1754c44f84c67bc6a237e03e4a0398d5b

  • SHA512

    e5d8ecd2c6e3ba600c253c7d6ca01ebcef50398eedb2e6008146adee950735b40fad3e8a48103f75c0a585af904ada889538a7f32d9277f4a2ef6df07bda7a43

  • SSDEEP

    24576:DR11JiH/b4N3E9ZtE8E+FakGh62EmEEPwd/2R/ujlAMzPpR:DRTJY/S0O83rijE7AmlVzPz

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_91a4767026536af44716798ffc7149f1754c44f84c67bc6a237e03e4a0398d5b
    .zip

    Password: infected

  • Re Re Re Re New Order.eml
    .eml
  • email-html-2.txt
    .html
  • email-plain-1.txt
  • logi.png
    .png
  • payment slip of our bank.zip
    .zip
  • order pdf.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections