171da8879dc7ed27c54b2f59fb847484_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171da8879dc7ed27c54b2f59fb847484_JaffaCakes118
Size

67KB
MD5

171da8879dc7ed27c54b2f59fb847484
SHA1

66940f862f655a3702871a1f273f1990a3b9868f
SHA256

5dd8e637e57f441c2bc6704587814acc7d12a37b24631e265b39428e4ad902b0
SHA512

316f114fade63d26282ea4800d2e6c62b2c5e7630199f6bce6bfbddce9d4fd3dc55fd43f102f3f4baf67469ae24d704632e6e40d7e3455b8956cec477618b955
SSDEEP

1536:J7YTpkTFSDgUamC64HdtJfbIAqpTfO5Wem2/H:J7YTpkTF65aJfbIAuTfKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171da8879dc7ed27c54b2f59fb847484_JaffaCakes118

Files

171da8879dc7ed27c54b2f59fb847484_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b4df9e2eaab709a162b6f70da1d5a031

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILD_AREA\jdk6\control\build\windows-i586\tmp\sun\sun.awt\jawt\obj\jawt.pdb

Imports

awt

_DSGetDrawingSurface@8
_DSFreeDrawingSurface@4
_DSLockAWT@4
_DSUnlockAWT@4
_DSGetComponent@8

msvcr71

_onexit
__dllonexit
_except_handler3
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter

kernel32

DisableThreadLibraryCalls

Exports

Exports

_JAWT_GetAWT@8

Sections

.text
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE