JaffaCakes118_eb31ed47e480118f81cd411e1b596e4c | Triage

Sharing

General

Target

JaffaCakes118_eb31ed47e480118f81cd411e1b596e4c
Size

566KB
MD5

eb31ed47e480118f81cd411e1b596e4c
SHA1

1ee54e2ac07b815b7f0355332abc60d94a0fd4c8
SHA256

eba198c71f047f143f329759df49f33fd0d28ec83018098996eef7285ce0c7bc
SHA512

63a33ae27edcc97f6b42286b33d91e58498323aae0bacd464f9ef887e7b384e2d0c1b7a18dd8cb56c4a45e891590976ddc539243c1798e27cf5e706ee4a39ea8
SSDEEP

12288:J6tTiCfmGfoWjyiuxx9KjHvpILmdi9bNxmirVg:J6tTiC/foWeiKxoaLmuxmMVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Swift-pago.pdf.exe

Files

JaffaCakes118_eb31ed47e480118f81cd411e1b596e4c
.zip
Swift-pago.pdf.lz
.rar
Swift-pago.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 821KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transferencia-Ci banco.pdf
.pdf