babb0555884dcb4329ea5ef60d8d4185_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

babb0555884dcb4329ea5ef60d8d4185_JaffaCakes118
Size

532KB
MD5

babb0555884dcb4329ea5ef60d8d4185
SHA1

625655d27de42d29282f876f418134dff2f947cb
SHA256

d8ac3b4081b10592222e8eb07573584b5bb66e381a1497ebe2d9fab068fa492c
SHA512

af82ab1c5010f26dcb952c33dc20ba67a61de06e20f3a5141f54d7721c8bad063c68bf56b743fdfde71243fba1ad129c2cad7e986f35f7c315379de8d41a5ee3
SSDEEP

12288:nCDYKor7AuIFHBrzzX4FVwkM7cXlIJP7rVycz:nCc5jIFH1vGVw57QWvVz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
babb0555884dcb4329ea5ef60d8d4185_JaffaCakes118

Files

babb0555884dcb4329ea5ef60d8d4185_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 453KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ