33a7158082616561e0f625f43ef098ca_JaffaCakes118 | Triage

Sharing

General

Target

33a7158082616561e0f625f43ef098ca_JaffaCakes118
Size

60KB
MD5

33a7158082616561e0f625f43ef098ca
SHA1

d028dc5479876e253467d18cce053b141a8e6adb
SHA256

01cc3be55983a0d3069c2855fff24628b68c61b71cfe2e4813df65bb698c94a9
SHA512

5ad942df417104d98943c8a29329829498d9d5f6fadb56c0d39ea438d3c0e486f20fdac733fef20bdb213dde423c7a2a2aa590d54717ecaeaab1475e91fa06bc
SSDEEP

1536:7dYGXThKF39+keGOM1UgbY9ROv9Mt2cIM/FMKcpIkpik:7dYGXTwh9+kFRbY9ROytlIM/S55b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nota Fiscal Eletrônica 00000000000001235456785 6.cpl

Files

33a7158082616561e0f625f43ef098ca_JaffaCakes118
.rar
Nota Fiscal Eletrônica 00000000000001235456785 6.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ