6c58943a30de4ae0d5397a253761eb7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c58943a30de4ae0d5397a253761eb7a_JaffaCakes118
Size

415KB
MD5

6c58943a30de4ae0d5397a253761eb7a
SHA1

561aeccb95a03a05632f23aed373042463ecb6ef
SHA256

be7bf2b621661990326bbe8e9bfe0a3158194bfc124b6d986be4c41f698464c0
SHA512

1153be26c6c4ce02b01f56c102b4dbefaffb1bfec866a695d911ef2a324920b679082464a57da90f4ea39505d6dea775a246660a4332fa5145594532f3103124
SSDEEP

6144:H0CFvgwzDHBEDQpK3CT6j9zsli025QnGpvT6SQ/kFdIMxRUOaguensFM/L2VGHQ:H084kuoKyToz/RqSL3FdTGOJuenm0jQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/justificante de pago.exe

Files

6c58943a30de4ae0d5397a253761eb7a_JaffaCakes118
.rar
justificante de pago.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ