e149f4bbeb10c713191ace49f60b7ccc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e149f4bbeb10c713191ace49f60b7ccc_JaffaCakes118
Size

62KB
MD5

e149f4bbeb10c713191ace49f60b7ccc
SHA1

8a91ba250613f03e0545709b4536d0f94a04d4bd
SHA256

f60cd256b904c3fc5662add02f654b985a8ba2ae2bb7c30752b2c24efcdea91a
SHA512

47b6f979fdf2734b1cc9462ca8cdea98aab1ec30760548438e1cc51ec157b620c5478347fe6e46205ebf3f682d3f362dd30c7296926455788a72050575b93715
SSDEEP

1536:tbn6RJtwkIvv9GEE1oy6yerQZjtQ2phTvtEG64EGb:uIvv9GeyHZZtTVQ4rb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Cliente_AnexoDoc.exe

Files

e149f4bbeb10c713191ace49f60b7ccc_JaffaCakes118
.zip
Cliente_AnexoDoc.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ