JaffaCakes118_6048d2cc24be326d2ede052bb52c19fa | Triage

Sharing

General

Target

JaffaCakes118_6048d2cc24be326d2ede052bb52c19fa
Size

508KB
MD5

6048d2cc24be326d2ede052bb52c19fa
SHA1

7487e0fb9963efea59d55655679b77562b64c54b
SHA256

2115a61103609e2f05e93ad1f8a18a21ef5f9a718e765c7bd7fc91e2cf6ba619
SHA512

c2658fb9670de542543364fb0affe45046c5623e9271e09c89d21761749598df082404ba494b1f69c02df47aff339b237cc826ec9a3380176023d9e549a1c576
SSDEEP

12288:H9ALbkJzj+WT29ya1xUohYUsIXq0KaRegD5zE5KENGcm8Za:dO+zjX2sixqA7fegDxE5/Xm8Za

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/czOxHskgIAQwZ8m.exe

Files

JaffaCakes118_6048d2cc24be326d2ede052bb52c19fa
.eml
ORDER.zip
.zip
czOxHskgIAQwZ8m.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-plain-1.txt