JaffaCakes118_e8d1ee46ef1dcfe29eb2817c8d7f0614 | Triage

Sharing

General

Target

JaffaCakes118_e8d1ee46ef1dcfe29eb2817c8d7f0614
Size

615KB
MD5

e8d1ee46ef1dcfe29eb2817c8d7f0614
SHA1

fde9987bfb20f9ffe8b1f446112009c4a261a12a
SHA256

1ff2fd90e77ffcfc8abc0248b9c08e460cfb04c1865ad1d3628f26c5b60c5a07
SHA512

3ca1bcd680106e2e73bd9523b87c42defe4038250989ead262e4dbc5b86f9885f46ce337f92fa5d8a7a181bd7099ab57cf8f85e3fba582b9422f6d21ae710ba1
SSDEEP

12288:uh3RifInPj7TY2BxRNa+1SI8p8wLIxAtdLHze06NqL:g3Ey/JNa+1SMwLIxAtBHzzJL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/RPLTFL024962021.exe

Files

JaffaCakes118_e8d1ee46ef1dcfe29eb2817c8d7f0614
.eml
RPLTFL024962021.GZ
.rar
RPLTFL024962021.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 530KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt