2b338d77fd1085db48667e900de7df28_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b338d77fd1085db48667e900de7df28_JaffaCakes118
Size

116KB
MD5

2b338d77fd1085db48667e900de7df28
SHA1

2fbbe1e8a0202fe36c9fc9e6b454d2c1415cdd75
SHA256

42710c39c7a81357bf51552cb906a6a43794d97d56bad0819e715282bb567336
SHA512

bf752aaf450a6c31ce4ed9594f21f5ca91576cb5a995e3056b55053a2cf8b7643ca5420ca165a2aed93490d832c1a734559bac3fee2b4e9fc7e0b506808ac036
SSDEEP

1536:VN44lue9yNEjxpzM3oQsDtaWR053qCYictCtkqOsmOciYDsaIGbYXHmCFbNYkM:VN4S59yNEjxJM/3cCX87IG+FbGkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b338d77fd1085db48667e900de7df28_JaffaCakes118

Files

2b338d77fd1085db48667e900de7df28_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1a712d6b7d636854f6fe71f8e4a2963

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
StretchBlt

kernel32

AddAtomA
FindAtomA
LoadLibraryA
GetProcAddress

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memcpy
memset
realloc

user32

AdjustWindowRect
ClientToScreen
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EqualRect
GetClientRect
GetDC
GetMessageA
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
IntersectRect
LoadCursorA
OffsetRect
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
SetForegroundWindow
SetParent
SetRectEmpty
SetWindowLongA
SetWindowPlacement
SetWindowPos
ShowWindow
TranslateMessage
UpdateWindow

libvlc

__msg_Generic
__var_Create
__var_Destroy
__var_Get
__var_Set
__vlc_object_create
__vlc_object_destroy
__vlc_object_find
__vlc_object_release
__vlc_thread_create
__vlc_thread_join
__vlc_thread_ready
config_Duplicate
playlist_LockControl
vlc_dgettext
vout_ControlWindow
vout_PlacePicture
vout_ReleaseWindow
vout_RequestWindow
vout_vaControlDefault

Exports

Exports

vlc_entry__0_8_6

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1a712d6b7d636854f6fe71f8e4a2963

Headers

File Characteristics

Imports

gdi32

kernel32

msvcrt

user32

libvlc

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 1024B - Virtual size: 816B

.bss Size: - Virtual size: 224B

.edata Size: 512B - Virtual size: 88B

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 99KB - Virtual size: 98KB

.reloc Size: 1024B - Virtual size: 564B

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 1024B - Virtual size: 816B

.bss
Size: - Virtual size: 224B

.edata
Size: 512B - Virtual size: 88B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 99KB - Virtual size: 98KB

.reloc
Size: 1024B - Virtual size: 564B