17785cefc1c13e0ac1928ced428eee0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17785cefc1c13e0ac1928ced428eee0c_JaffaCakes118
Size

188KB
MD5

17785cefc1c13e0ac1928ced428eee0c
SHA1

da530a26e1eb327965b497d8dec35abeb74330e0
SHA256

052065739bb140022f577b3298d51eb335d61e130d10b1281186574a5d079101
SHA512

79baf161a84ba7c3c55f3a457cfa0fedc38e4680b61f7fe1e4633d4878513aea71bc3d80ef7048ee94b7a0b72e796498b5087aaaf742481e2c9152966bf5e333
SSDEEP

3072:KZJdujr0w50g+RpfaK7OXOuV1cYTfW0DrtwCwY9zra7y/X4R3+6FX9JuNudmgMxx:UJdTgMpUnPI/YdvfQ3BFfuNudmHKLBS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17785cefc1c13e0ac1928ced428eee0c_JaffaCakes118

Files

17785cefc1c13e0ac1928ced428eee0c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\jdk7u2_32P\jdk7u17\build\windows-i586\tmp\sun\launcher\orbd\obj\orbd.pdb

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE