29f9526f288d7d233d941fd7878e2e0c_JaffaCakes118

General

Target

29f9526f288d7d233d941fd7878e2e0c_JaffaCakes118
Size

164KB
MD5

29f9526f288d7d233d941fd7878e2e0c
SHA1

6888119f4b9426d2e473779a127e0ecd0695b57e
SHA256

cd8ed9e99627f0c91dfb3046691495c8eefc4ba6e7219883eff2e5a7c1ba8a90
SHA512

dbaf5df22959340d0dfb6bd9834c1e25759ffc5d729ca95a710fb6eccaef80acdb921ca4317900df67cc33fb61c9f6f31c40a9cb6f67b02b4598fe2d848950fc
SSDEEP

1536:G27HAFLI/bBsohtlvteNsJAatmMXZZX1NnM8w4QRnU11YXkr0wzJRUwOPG6Ip+Vj:TbrhtdAat5N+RnU11TlnSzImRFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f9526f288d7d233d941fd7878e2e0c_JaffaCakes118

Files

29f9526f288d7d233d941fd7878e2e0c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f9bbfaf43c6ea49a5cfa94ba894e2d76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILD_AREA\jdk6\control\build\windows-i586\tmp\jpda\jdwp\obj\jdwp.pdb

Imports

msvcr71

abs
exit
strcat
strcpy
abort
strtol
atol
getenv
fprintf
strrchr
_vsnprintf
fflush
_sleep
strftime
localtime
time
strchr
fopen
fclose
isdigit
strncpy
strerror
_errno
sprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
_setjmp3
memcpy
_snprintf
longjmp
strlen
strncmp
strcmp
_iob
setvbuf
memset
_getpid

kernel32

CreateProcessA
GetLastError
FormatMessageA
GetCurrentThreadId
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DisableThreadLibraryCalls

Exports

Exports

_Agent_OnLoad@12
_Agent_OnUnload@4

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f9bbfaf43c6ea49a5cfa94ba894e2d76

Headers

File Characteristics

PDB Paths

Imports

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 912B

.reloc Size: 12KB - Virtual size: 10KB

.text Size: 64KB - Virtual size: 64KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 912B

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 64KB - Virtual size: 64KB