e24d9636b82dbcd3a4a445dbf3aa70b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e24d9636b82dbcd3a4a445dbf3aa70b0_JaffaCakes118
Size

137KB
MD5

e24d9636b82dbcd3a4a445dbf3aa70b0
SHA1

4b234150c9c32d174ffbcbb25fcd1ca2abcc5ac2
SHA256

4809cf0f01f1030af828c6711819b3b44b8678e4156dea44dd521d1232b89572
SHA512

2e30778ca6aba06ddcfb03a52c3ece3107effe1f901e7b3eed04d0abb8e92daa815d52b67d1fbab182cc8c70d7d4e472de1f91b95774bdd81adf10831dbc41b9
SSDEEP

3072:GxJpikAzD/07J05hmkIfd8Gx0u/3ndKAO2wS2YcZbOW:Gh2P87J0HmkI8o0uvdjlwS2TZiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proposta.cpl

Files

e24d9636b82dbcd3a4a445dbf3aa70b0_JaffaCakes118
.zip
Proposta.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ