bb1930d5834e87edcfef10b8080e8fc3_JaffaCakes118 | Triage

Sharing

General

Target

bb1930d5834e87edcfef10b8080e8fc3_JaffaCakes118
Size

190KB
MD5

bb1930d5834e87edcfef10b8080e8fc3
SHA1

ee861b35d3e78106b73aa43eeae33bdd70ec1a33
SHA256

52e1ffaedb13980eb8b45fe29ea579a69e7128ae3e434e6c1e43c90a3c2180ba
SHA512

f964a308d5d428565674bff6589f59fc279e2ad46e06364fd41584d690a653e6b076db86ed55c46fc5a69cce7509100534d9bcca824651e3dcbcd068bb147989
SSDEEP

3072:yzbifrdHk2J0ui0nGDRLdkgvs8u6vbc6HJppndEuvKvU6539gLS//D+8Zo+s8ahG:MiDdHxJo0n28wJu6D1puuSM7LSnDTZuO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/COMPROVANTE_3986731.EXE

Files

bb1930d5834e87edcfef10b8080e8fc3_JaffaCakes118
.rar
COMPROVANTE_3986731.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ