4bc00fa5e670fc019f670940ffc58bc3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4bc00fa5e670fc019f670940ffc58bc3_JaffaCakes118
Size

81KB
MD5

4bc00fa5e670fc019f670940ffc58bc3
SHA1

0a225a0ec09b3d5532c72e1fac1821dd9c228752
SHA256

b6034e66037d0b61e0a20c06dfd2b0fdf9f5229ad1d145bdb1bd7f2070d2d2c5
SHA512

20e487400555773719cd9f3f565b415d7f57ceb30c41485b025e17eb10090b281ee6112cb94733f923476fc5efb49480a4ca5dc491552e926f81a0ab555fcec9
SSDEEP

1536:Qzjl29TJKmppkTFSDgUamC64HdtJfbIAqpTfO5Wem2/v:Q3l2JJKmppkTF65aJfbIAuTfKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bc00fa5e670fc019f670940ffc58bc3_JaffaCakes118

Files

4bc00fa5e670fc019f670940ffc58bc3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

33dcb2647b52243161bc9072778e04f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILD_AREA\jdk6\control\build\windows-i586\tmp\sun\javax.sound\jsoundds\obj\jsoundds.pdb

Imports

winmm

timeGetTime

user32

GetForegroundWindow
GetDesktopWindow

dsound

ord7
ord1
ord6
ord2

msvcr71

memset
strncpy
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
memcmp
malloc
free
strcpy
memcpy

kernel32

CreateEventA
InitializeCriticalSection
DisableThreadLibraryCalls
CreateThread
EnterCriticalSection
SetEvent
CloseHandle
LeaveCriticalSection
WaitForSingleObject

Exports

Exports

_Java_com_sun_media_sound_DirectAudioDeviceProvider_nGetNumDevices@8
_Java_com_sun_media_sound_DirectAudioDeviceProvider_nNewDirectAudioDeviceInfo@12
_Java_com_sun_media_sound_DirectAudioDevice_nAvailable@20
_Java_com_sun_media_sound_DirectAudioDevice_nClose@20
_Java_com_sun_media_sound_DirectAudioDevice_nFlush@20
_Java_com_sun_media_sound_DirectAudioDevice_nGetBufferSize@20
_Java_com_sun_media_sound_DirectAudioDevice_nGetBytePosition@28
_Java_com_sun_media_sound_DirectAudioDevice_nGetFormats@24
_Java_com_sun_media_sound_DirectAudioDevice_nIsStillDraining@20
_Java_com_sun_media_sound_DirectAudioDevice_nOpen@52
_Java_com_sun_media_sound_DirectAudioDevice_nRead@32
_Java_com_sun_media_sound_DirectAudioDevice_nRequiresServicing@20
_Java_com_sun_media_sound_DirectAudioDevice_nService@20
_Java_com_sun_media_sound_DirectAudioDevice_nSetBytePosition@28
_Java_com_sun_media_sound_DirectAudioDevice_nStart@20
_Java_com_sun_media_sound_DirectAudioDevice_nStop@20
_Java_com_sun_media_sound_DirectAudioDevice_nWrite@40

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

33dcb2647b52243161bc9072778e04f3

Headers

File Characteristics

PDB Paths

Imports

winmm

user32

dsound

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 1024B - Virtual size: 610B

.text Size: 62KB - Virtual size: 64KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 1024B - Virtual size: 610B

.text
Size: 62KB - Virtual size: 64KB