358c364515561d8a93426612265ddd4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

358c364515561d8a93426612265ddd4a_JaffaCakes118
Size

206KB
MD5

358c364515561d8a93426612265ddd4a
SHA1

9414238552cfd6c9f834efe5c74ec56e7d9d8a40
SHA256

a7db1bfd398b639080cc6e7c11cf2a2caf1dc5b9648623bc200dd65a9ac1d6c9
SHA512

a521f34841b31318cdb3efb03100a311485700e13c874de8ccd93efdf91f589534df26712ac8015f9ac38b8aa96685df0a2fd65b74c15d5bf2155e9cc06fff5f
SSDEEP

3072:ub4yzj4a03sAcOhxWYGvF6J2GNb8hH2Hv+a/pmQeBE57axp1sXQRfFl8Of:GztUsjOhdYF6UGShckfBEmp1jRtlLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
358c364515561d8a93426612265ddd4a_JaffaCakes118

Files

358c364515561d8a93426612265ddd4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_~1\jdk6_22\control\build\WINDOW~1\tmp\sun\sun.tools.security\klist\obj\klist.pdb

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE