3ccda282c4bf2a2a5bdf6cc9c4840da3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3ccda282c4bf2a2a5bdf6cc9c4840da3_JaffaCakes118
Size

107KB
MD5

3ccda282c4bf2a2a5bdf6cc9c4840da3
SHA1

70dd4d4535de4e9b1a76d4c29233eb1fe546a0f2
SHA256

0e131f79ea09df81aa0c902ef55ddab8840cc174b3f18384183dcf6ab58624c0
SHA512

558e3930bb9f887720387b36e5f0ab7578997ee046e62067150ecf916b44e19bdc4e05f761a3367a8ea8fdcb4f958e90f90dd03a33c061d8050e6afbd2ec721d
SSDEEP

1536:uVSHHxmpGX+peMiKo1gURu+VAzGcuRBNQY7jCJ2cwX5/9/JEIUEXCy0UDdFc237:ut5to1gou+VAacu7Ne2cE5DM5idLr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ccda282c4bf2a2a5bdf6cc9c4840da3_JaffaCakes118

Files

3ccda282c4bf2a2a5bdf6cc9c4840da3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2c109a1db6ad2904f586f86db874c6b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

config_ChainParse
var_AddCallback
var_Create
var_DelCallback
var_GetChecked
vlc_Log
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_fstat
_putenv
__dllonexit
__lc_codepage
__mb_cur_max
_commit
_errno
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fullpath
_iob
abort
fflush
fgetc
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
pow
realloc
sscanf
strchr
strcpy
strlen
strpbrk
strrchr
strspn
toupper
vfprintf
wcslen

Exports

Exports

vlc_entry__1_2_0l
vlc_entry_copyright__1_2_0l
vlc_entry_license__1_2_0l

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c109a1db6ad2904f586f86db874c6b6

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 163B

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 1008B

.gnu_deb Size: 56KB - Virtual size: 56KB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 163B

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 1008B

.gnu_deb
Size: 56KB - Virtual size: 56KB