bab6c045f38d5032f90a2c09c2fb7aeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bab6c045f38d5032f90a2c09c2fb7aeb_JaffaCakes118
Size

15KB
MD5

bab6c045f38d5032f90a2c09c2fb7aeb
SHA1

545d0e836a8b3e8776874f9b4b0e1a2578741897
SHA256

48d2f661a3ab5520be026448a7656655477172b9756ef9f20ed826f4d98e6f94
SHA512

b62cea1ffcfc5c8377ba5672bc7cfc3661cf0574119dfb1ed29347b4bf5902c1d3cfd901358b07bc4c28cd1f6f6089e7d49486a589c05ff82f675bd04ef1f8f0
SSDEEP

384:u9rsEAxEvt/D2H4rS2EPVUvwzAlEQEzBQDmEDDR:WrPAxEl/9tEP2IzAldEzCDmEDDR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab6c045f38d5032f90a2c09c2fb7aeb_JaffaCakes118

Files

bab6c045f38d5032f90a2c09c2fb7aeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE