87ddf7590cd9d1d6d8b5c52704f7fd01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ddf7590cd9d1d6d8b5c52704f7fd01_JaffaCakes118
Size

193KB
MD5

87ddf7590cd9d1d6d8b5c52704f7fd01
SHA1

cda64db888824d58a8863f48a326567c655ee275
SHA256

4685731e1d960769223aeb2d66ed09c98b5a84fceb83dc0ae07ab05c659b4ce5
SHA512

b35574ea260c035e41e826f42c17fafc561c7976f59ae3da0192abdde06e26a10643e3f65f8dfcb9f3692fb34372bd5f45d605098f295b5f5f0ff81ab34b8615
SSDEEP

3072:i/NRsZpl6rtrSnEnL2UyBzcZbAYnnaTzJuxRQi13FKEYM7HZZGtf8xoH6SYen:MsZL2FL2UEzcZLnazJUqAFSOXGtNahen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ddf7590cd9d1d6d8b5c52704f7fd01_JaffaCakes118

Files

87ddf7590cd9d1d6d8b5c52704f7fd01_JaffaCakes118
.dll windows:4 windows x86 arch:x86

54a90f8e4a92d67b8fb7c2889543e3b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILD_~1\jdk6_18\control\build\WINDOW~1\tmp\sun\sun.rmi\rmi\obj\rmi.pdb

Imports

jvm

_JVM_LatestUserDefinedLoader@4

msvcr71

free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

_Java_sun_rmi_server_MarshalInputStream_latestUserDefinedLoader@8

Sections

.text
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE