c06a3be227f8f8719b00fb1219b38346_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c06a3be227f8f8719b00fb1219b38346_JaffaCakes118
Size

206KB
MD5

c06a3be227f8f8719b00fb1219b38346
SHA1

8d1444b2fa889f646f23fc95b910bafa27f763c6
SHA256

5a07aa10b68c9fff7c3ecd0ef93282cbfc591c7dd85bd44f1ef0091f7f70a2a6
SHA512

6e7c3cac1db6c114bdbc2faeb03a9c90810a508c4f3343ddb33252efe0e82b28bd7168346112a72e4642dd164a3dad8deb5b0ea8f6b9c53c0a52782ddc811a95
SSDEEP

3072:SzOzbJNKctSW6fndKQ3G3mM6G8++lYHtngFcixQVwzrx69/K0JxNFE42FTQYIA:lb+KSdfn4QW2Xl++lX5MKcLxNePF8Y/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c06a3be227f8f8719b00fb1219b38346_JaffaCakes118

Files

c06a3be227f8f8719b00fb1219b38346_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_~1\jdk6_22\control\build\WINDOW~1\tmp\sun\sun.tools.jconsole\jconsole\obj\jconsole.pdb

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE