e0bf754223fd1a57bd1dde4a8423bab0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0bf754223fd1a57bd1dde4a8423bab0_JaffaCakes118
Size

293KB
MD5

e0bf754223fd1a57bd1dde4a8423bab0
SHA1

bf369317b2d5e64144b50c502024b509ea54dcd8
SHA256

81f795cbc5304d33128964cb5e5fdeed96761387e98f027bba1ba731f4bc2bd0
SHA512

6dd7d41cfd0a7fbaa977a862250b496c60ff9bd5bff96414d098a4d68a8992f487655dba587cfa5da99e01aa4ad720548e9b6cc0ced959e2b5ea0cfe097d7178
SSDEEP

6144:XXgB60m0Hhb4sAWzyd5J91OOhsItR2LwwL9okznbER92vzbNahsZH:XXgB5m0Hhb4sAWi1OE1YhpogbE/2vPN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0bf754223fd1a57bd1dde4a8423bab0_JaffaCakes118

Files

e0bf754223fd1a57bd1dde4a8423bab0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_AREA\jdk6\control\build\windows-i586\tmp\sun\sun.security.tools\keytool\obj\keytool.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.getpat
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE