ee9eb858bb44e2d7540f884a14c80579_JaffaCakes118 | Triage

Sharing

General

Target

ee9eb858bb44e2d7540f884a14c80579_JaffaCakes118
Size

45KB
MD5

ee9eb858bb44e2d7540f884a14c80579
SHA1

241d3a55537204b17aa1da81e0725ceeef5ddeeb
SHA256

361dbd3b710fca711d7a4c6699ebde55261ab60c89a74b4ea51b27b47e2b97d3
SHA512

27e8bed3a5d849586c84bf33a2a965ddb292b0e882cde7c73e2964ec6ee9d96dc594553ae57c8a0d16337abeaa2b56c49700bf84ca3d799c4659c100349478b3
SSDEEP

768:/IVzT1TBPO27botrshqY+44e8TgThs0vowS6UnBd+UoTF0Bhe2ioA2fPg:c1T5OTshq145dsSoZ6UnO/WYbj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Cotacao_Orcamentaria_Junho.exe

Files

ee9eb858bb44e2d7540f884a14c80579_JaffaCakes118
.zip
Cotacao_Orcamentaria_Junho.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

NP

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ