21302f4c2cb6b3dc8cb18e5252bd26b9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

21302f4c2cb6b3dc8cb18e5252bd26b9_JaffaCakes118
Size

63KB
MD5

21302f4c2cb6b3dc8cb18e5252bd26b9
SHA1

441499e23e0105a05bd45f0ae1f6f4650e026fc7
SHA256

5636e242cb23f92db9b0c5211c176182daf617fc230c3fb53cd5a1274d1c46d3
SHA512

fdae984a03581f6bacbced6f2493e7218a54433ff2ef3554b254644cac8d56d707cb2b7772d403821f3553b93b1edd31f94d5206c6b45851597133ddb5795bd9
SSDEEP

1536:pDAZqF5L3ujqZVk1FbE0ScQyAHcpV7vs1ULLAKOaRnRD:pXn2zbrSc/AaV41ULsKOaRnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21302f4c2cb6b3dc8cb18e5252bd26b9_JaffaCakes118

Files

21302f4c2cb6b3dc8cb18e5252bd26b9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

30776d90e621b12f7612f800ca5b37ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\home\dev\dealing\main\fen\lib\javareflect123sg.pdb

Imports

javawrap123sg

??0INJAVA_Array@@QAE@PAV_jarray@@PAUJNIEnv_@@@Z
??1INJAVA_Array@@UAE@XZ
??0INJAVA_Class@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ComponentType@INJAVA_Array@@QBE?AVINJAVA_Class@@XZ
?IsInstanceOf@INJAVA_Object@@QBE_NABVINJAVA_Class@@@Z
?IsPrimitive@INJAVA_Class@@QBE_NXZ
?GetJVM@INJAVA_JVM@@SAAAV1@XZ
?GetJNIEnv@INJAVA_JVM@@QBEPAUJNIEnv_@@XZ
?Get@INJAVA_Array@@QBEPAV_jarray@@XZ
?ComparableTo@INJAVA_Class@@QBE?AV1@ABVINJAVA_Object@@@Z
?ComparableTo@INJAVA_Object@@QBE?AV1@ABV1@@Z
?Get@INJAVA_Object@@QBEPAV_jobject@@XZ
??0INJAVA_Class@@QAE@PAV_jclass@@PAUJNIEnv_@@@Z
??1INJAVA_Class@@UAE@XZ
??0INJAVA_Object@@QAE@PAUJNIEnv_@@@Z
?IsNull@INJAVA_Object@@QBE_NXZ
?GetEnv@INJAVA_Object@@QBEPAUJNIEnv_@@XZ
?Get@INJAVA_Class@@QBEPAV_jclass@@XZ
??0INJAVA_Exception@@QAE@PAV_jthrowable@@PAUJNIEnv_@@@Z
?Description@INJAVA_Exception@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?ToString@INJAVA_Object@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0INJAVA_Exception@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0INJAVA_Exception@@QAE@ABV0@@Z
??1INJAVA_Exception@@UAE@XZ
??0INJAVA_Object@@QAE@PAV_jobject@@PAUJNIEnv_@@@Z
??4INJAVA_Object@@QAEAAV0@ABV0@@Z
??0INJAVA_Object@@QAE@ABV0@@Z
??1INJAVA_Object@@UAE@XZ

msvcp100d

??0_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Debug_message@std@@YAXPB_W0I@Z
??1_Container_base12@std@@QAE@XZ

msvcr100d

__CxxFrameHandler3
??3@YAXPAX@Z
??_V@YAXPAX@Z
_wassert
_CxxThrowException
memcpy
strlen
memmove
memcmp
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
_CRT_RTC_INITW
?terminate@@YAXXZ
_malloc_dbg
_free_dbg
_encoded_null
_CrtSetCheckCount
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit

kernel32

FreeLibrary
VirtualQuery
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer

Exports

Exports

??0INJAVA_Constructor@@QAE@ABV0@@Z
??0INJAVA_Constructor@@QAE@ABVINJAVA_Class@@ABVINJAVA_Array@@_N@Z
??0INJAVA_Constructor@@QAE@ABVINJAVA_Object@@@Z
??0INJAVA_Field@@QAE@ABV0@@Z
??0INJAVA_Field@@QAE@ABVINJAVA_Class@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0INJAVA_Method@@QAE@ABV0@@Z
??0INJAVA_Method@@QAE@ABVINJAVA_Class@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVINJAVA_Array@@_N@Z
??0INJAVA_Method@@QAE@ABVINJAVA_Object@@@Z
??1INJAVA_Constructor@@UAE@XZ
??1INJAVA_Field@@UAE@XZ
??1INJAVA_Method@@QAE@XZ
??1INJAVA_PrimWrap@@UAE@XZ
??4INJAVA_Constructor@@QAEAAV0@ABV0@@Z
??4INJAVA_Field@@QAEAAV0@ABV0@@Z
??4INJAVA_Method@@QAEAAV0@ABV0@@Z
??_7INJAVA_Constructor@@6B@
??_7INJAVA_Field@@6B@
??_7INJAVA_PrimWrap@@6B@
?CastPrimitiveTo@INJAVA_PrimWrap@@SA?AVINJAVA_Object@@ABV2@0@Z
?Get@INJAVA_Field@@QBE?AVINJAVA_Object@@ABV2@@Z
?GetConstructors@INJAVA_Constructor@@SA?AVINJAVA_Array@@ABVINJAVA_Class@@@Z
?GetDeclaringClass@INJAVA_Constructor@@QBE?AVINJAVA_Class@@XZ
?GetDeclaringClass@INJAVA_Method@@QBE?AVINJAVA_Class@@XZ
?GetMethods@INJAVA_Method@@SA?AVINJAVA_Array@@ABVINJAVA_Class@@@Z
?GetName@INJAVA_Method@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetParameterTypes@INJAVA_Constructor@@QBE?AVINJAVA_Array@@XZ
?GetParameterTypes@INJAVA_Method@@QBE?AVINJAVA_Array@@XZ
?GetType@INJAVA_Field@@QBE?AVINJAVA_Class@@XZ
?InitStatics@INJAVA_Constructor@@AAEXPAUJNIEnv_@@@Z
?InitStatics@INJAVA_Field@@AAEXPAUJNIEnv_@@@Z
?InitStatics@INJAVA_Method@@AAEXPAUJNIEnv_@@@Z
?InitStatics@INJAVA_PrimWrap@@CAXXZ
?Invoke@INJAVA_Method@@QBE?AVINJAVA_Object@@V2@VINJAVA_Array@@@Z
?IsStatic@INJAVA_Field@@QBE_NXZ
?IsStatic@INJAVA_Method@@QBE_NXZ
?NewInstance@INJAVA_Constructor@@QBE?AVINJAVA_Object@@ABVINJAVA_Array@@@Z
?PrimType2WrapperType@INJAVA_PrimWrap@@SA?AVINJAVA_Class@@ABV2@@Z
?ReturnType@INJAVA_Method@@QBE?AVINJAVA_Class@@XZ
?Set@INJAVA_Field@@QAEXVINJAVA_Object@@ABV2@@Z
?WidensTo@INJAVA_PrimWrap@@SA_NABVINJAVA_Array@@0@Z
?WidensTo@INJAVA_PrimWrap@@SA_NABVINJAVA_Class@@0@Z
?WrapperType2PrimType@INJAVA_PrimWrap@@SA?AVINJAVA_Class@@ABV2@@Z
?classClass__@INJAVA_Constructor@@0PAV_jclass@@A
?classClass__@INJAVA_Field@@0PAV_jclass@@A
?classClass__@INJAVA_Method@@0PAV_jclass@@A
?constructorClass__@INJAVA_Constructor@@0PAV_jclass@@A
?fieldClass__@INJAVA_Field@@0PAV_jclass@@A
?gArrayWidensToID_@INJAVA_PrimWrap@@0PAU_jmethodID@@A
?gCastID_@INJAVA_PrimWrap@@0PAU_jmethodID@@A
?gPrim2WrapperID_@INJAVA_PrimWrap@@0PAU_jmethodID@@A
?gWidensToID_@INJAVA_PrimWrap@@0PAU_jmethodID@@A
?gWrapClass_@INJAVA_PrimWrap@@0PAV_jclass@@A
?gWrapper2PrimID_@INJAVA_PrimWrap@@0PAU_jmethodID@@A
?getConstructorsID__@INJAVA_Constructor@@0PAU_jmethodID@@A
?getDeclaringClassID__@INJAVA_Constructor@@0PAU_jmethodID@@A
?getDeclaringClassID__@INJAVA_Method@@0PAU_jmethodID@@A
?getFieldID__@INJAVA_Field@@0PAU_jmethodID@@A
?getMethodsID__@INJAVA_Method@@0PAU_jmethodID@@A
?getModifiersID__@INJAVA_Field@@0PAU_jmethodID@@A
?getModifiersID__@INJAVA_Method@@0PAU_jmethodID@@A
?getNameID__@INJAVA_Method@@0PAU_jmethodID@@A
?getParameterTypesID__@INJAVA_Constructor@@0PAU_jmethodID@@A
?getParameterTypesID__@INJAVA_Method@@0PAU_jmethodID@@A
?getTypeID__@INJAVA_Field@@0PAU_jmethodID@@A
?getValueID__@INJAVA_Field@@0PAU_jmethodID@@A
?invokeID__@INJAVA_Method@@0PAU_jmethodID@@A
?isStaticID__@INJAVA_Field@@0PAU_jmethodID@@A
?isStaticID__@INJAVA_Method@@0PAU_jmethodID@@A
?methodClass__@INJAVA_Method@@0PAV_jclass@@A
?modifierClass__@INJAVA_Field@@0PAV_jclass@@A
?modifierClass__@INJAVA_Method@@0PAV_jclass@@A
?newConstructorClassID__@INJAVA_Constructor@@0PAU_jmethodID@@A
?newConstructorID__@INJAVA_Constructor@@0PAU_jmethodID@@A
?newInstanceID__@INJAVA_Constructor@@0PAU_jmethodID@@A
?newMethodClassID__@INJAVA_Method@@0PAU_jmethodID@@A
?newMethodID__@INJAVA_Method@@0PAU_jmethodID@@A
?reflectionFactory__@INJAVA_Constructor@@0PAV_jclass@@A
?reflectionFactory__@INJAVA_Method@@0PAV_jclass@@A
?returnTypeID__@INJAVA_Method@@0PAU_jmethodID@@A
?setValueID__@INJAVA_Field@@0PAU_jmethodID@@A

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30776d90e621b12f7612f800ca5b37ba

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

javawrap123sg

msvcp100d

msvcr100d

kernel32

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB