69328b8794658066693aff37467f44c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69328b8794658066693aff37467f44c7_JaffaCakes118
Size

233KB
MD5

69328b8794658066693aff37467f44c7
SHA1

be08b2bb76e09a3897386b04194b7f3d94450463
SHA256

e4767437e8d3b1a7a0441091b1f28758e9dcfe5d8b08f0cfb65f42caff54ae84
SHA512

1300eedfdc854380c8d3269c84ec5fcaf84fa032d602abfe485c451b076e48f7f1cb9f69e4eeee4a7aa3e656df84d5e5e3c939892c8ece145d1f643fb8655790
SSDEEP

6144:H+vT8jtyy+Akw1cL1OsIenEbzidv2mqaUS2:evTyyfAmcG6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69328b8794658066693aff37467f44c7_JaffaCakes118

Files

69328b8794658066693aff37467f44c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_~1\jdk6_24\control\build\WINDOW~1\tmp\deploy\plugin\javacplexec\obj\javacpl.pdb

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE