4222972adb6a7f5b42a115169d7b697f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4222972adb6a7f5b42a115169d7b697f_JaffaCakes118
Size

163KB
MD5

4222972adb6a7f5b42a115169d7b697f
SHA1

596eeab6aac3be9ac46cf8171b06f59d919367a9
SHA256

a0cca72547554c40d260a5429745fb2d7bc85c744b602830ba318346e30e80b6
SHA512

1de9b66413c712cfe8fa2129c1d184211aa1ad12ee94d2a5e18c15fa239b9a47058b2ccacefc2a0123a45b85115ad06dfcc752ba22d416f3b91d32f1400c8d9a
SSDEEP

3072:FIRPjOVV57NwyboocgQcNx7jghkh/AhG:ir9MpQcNNbho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4222972adb6a7f5b42a115169d7b697f_JaffaCakes118

Files

4222972adb6a7f5b42a115169d7b697f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b4cf8dfb76cd92cf6d178b67d65a8d95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libvlccore

__config_GetPsz
__input_item_NewExt
__msg_Generic
__net_Connect
__net_Gets
__net_OpenDgram
__net_Read
__net_Write
__var_Create
__var_Get
__var_Set
__vlc_gc_decref
__vlc_mutex_destroy
__vlc_object_create
__vlc_object_find
__vlc_object_kill
__vlc_object_lock
__vlc_object_release
__vlc_object_timedwait
__vlc_object_unlock
__vlc_thread_create
__vlc_thread_join
decode_URI
input_GetItem
input_item_AddSubItem
mdate
msleep
net_Printf
vlc_b64_encode
vlc_config_create
vlc_config_set
vlc_getnameinfo
vlc_iconv
vlc_iconv_close
vlc_iconv_open
vlc_module_set
vlc_mutex_init
vlc_poll

kernel32

LoadLibraryA
EnterCriticalSection
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
ReleaseMutex
Sleep
WaitForSingleObject

msvcrt

_strdup
__dllonexit
_errno
_stricmp
atoi
fflush
free
getenv
malloc
memcpy
memmove
memset
rand
realloc
sprintf
srand
strchr
strlen
strstr
vsprintf

ws2_32

closesocket
getsockname
recv

Exports

Exports

vlc_entry__0_9_0m
vlc_entry_copyright__0_9_0m
vlc_entry_license__0_9_0m

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4cf8dfb76cd92cf6d178b67d65a8d95

Headers

File Characteristics

Imports

libvlccore

kernel32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 512B - Virtual size: 100B

.rdata Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 167B

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 94KB - Virtual size: 94KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 512B - Virtual size: 100B

.rdata
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 167B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 94KB - Virtual size: 94KB

.reloc
Size: 1KB - Virtual size: 1KB