1009f4349568ae7122b4506c8eb7e2f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1009f4349568ae7122b4506c8eb7e2f2_JaffaCakes118
Size

72KB
MD5

1009f4349568ae7122b4506c8eb7e2f2
SHA1

31f5ca59bf8f74a39b89b005b81e374a473912bf
SHA256

38637dfdbe5ed64cf3ff935f09c2f5bdfea64abe2fd3e0d8462aa477208d04c4
SHA512

810cad7a68cbf48bcb6ceb81ccd16f69c441fd495a6819bfc6de046c4f5f3dd35fa271818be2a82fff3a30be61c29c3d493620ad567017a4f5fdeed1aa85f562
SSDEEP

1536:agOZxZ2Zeyg15L/Hu1rsqK+w1UJTBjnqjilQ/mpoKt3:+xZseycmy+I2TBjnhu0oKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/visualizarconsulta3728.cpl

Files

1009f4349568ae7122b4506c8eb7e2f2_JaffaCakes118
.zip
visualizarconsulta3728.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ