3a8ae6f4d285fb58e96c99a4eda69802_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8ae6f4d285fb58e96c99a4eda69802_JaffaCakes118
Size

206KB
MD5

3a8ae6f4d285fb58e96c99a4eda69802
SHA1

5eb695ff42199e483db0404c17e0ddcbe3eca7da
SHA256

06b87849bac674260824bd005a018e74912d57c4e5de211093727cd2eba5381e
SHA512

8e5375215b9d25446f852815e4012faa0cb77a0d37c502cdb9d729cde0f277d908b64aa51fc9fc1d17204e53d4598c4643f5cf593ea7edfc1b0ae09dbc71b9a3
SSDEEP

6144:Sz3itiGHs97w4EdbHP9aC7B44EJjRFJpSab1/2:Sz3iVM9whlHVxN4HJjRFJpf5/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8ae6f4d285fb58e96c99a4eda69802_JaffaCakes118

Files

3a8ae6f4d285fb58e96c99a4eda69802_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_~1\jdk6_18\control\build\WINDOW~1\tmp\Activation\com.sun.corba.se.impl.activation\servertool\obj\servertool.pdb

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE