babaff0684fe0af16a232d93b1083e43_JaffaCakes118 | Triage

Sharing

General

Target

babaff0684fe0af16a232d93b1083e43_JaffaCakes118
Size

94KB
MD5

babaff0684fe0af16a232d93b1083e43
SHA1

4f926bbb6d64d82a0a148a43bf3a6237905844ae
SHA256

9a8fc9cd323544dcfa4f4217eaf025a64a9b8f2968f2308ced00699014498a8b
SHA512

b21b3c9ebea44ec2215d6711c2cb6f74f7ea4a6b531e7bfabbfe5bf681fcea700d7366dbb963dbee1194a342b4999b97c9b4ddf1fa20c68b559fe736475cb206
SSDEEP

1536:2JEcZdaFk4w68KLwar9EtwmbBcU8QbRH+vxAGBcXQ3Ph10urmFIy:JcDMk4r19EtPdwvxRBcXQ3ptyFIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
babaff0684fe0af16a232d93b1083e43_JaffaCakes118

Files

babaff0684fe0af16a232d93b1083e43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ