2d3aa4699af7d445fd1587013ca1e7f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d3aa4699af7d445fd1587013ca1e7f8_JaffaCakes118
Size

445KB
MD5

2d3aa4699af7d445fd1587013ca1e7f8
SHA1

11cedb2937efa173a77f0afa1749ed661e221b7e
SHA256

2bb3e7e6b06134ff521c06e679e9d82e0ebf06fdf89c5b255ba0c146cfbaf13d
SHA512

30883f4f426a31b227e539e29b8306c28f095d6e3406ae0214f18e56f0f2040b567d8d5b93a02ce408c327dbd862dda7d077704bff2d4f6b6925f48460d3ddce
SSDEEP

12288:UYZ/6jtP4CVc9kub1jiCL06T1xaigvbzM3+QUl6:UmylUb1GCN1xQHM3+L6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ComentarioDeVoz.cpl

Files

2d3aa4699af7d445fd1587013ca1e7f8_JaffaCakes118
.zip
ComentarioDeVoz.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 762KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ