7310a3415173a5d47760024fa6a77728_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7310a3415173a5d47760024fa6a77728_JaffaCakes118
Size

94KB
MD5

7310a3415173a5d47760024fa6a77728
SHA1

27ce4508d5b127ddeb4883071dbf68c5790ffd2c
SHA256

007ae0cdddfbe41d8b0ad73990e96819de51920f2d4bd0233a945dda4ae57149
SHA512

9786e5a4b4a99f3086557f00f0a8cf847e58dce4a84fe8c5c2e26c9ac75810eb942e379a8c63bad6ba534d4e07ac8ecfbe0a28536c4187e2646f1314ee6b6589
SSDEEP

1536:sdeK+SWZEX4EqYNSnOC4cZ8gtE5qHb0CxtJ2cr1NjVNgEBFlClUoZL7D4:sj+VZEX4NYYnOC42uAbPZrrjVNgqbClG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7310a3415173a5d47760024fa6a77728_JaffaCakes118

Files

7310a3415173a5d47760024fa6a77728_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05ae66ed0a6de25ca26c2cb318f9f9f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_~1\jdk6_31\control\build\WINDOW~1\tmp\deploy\plugin\jp2launcher\obj\jp2launcher.pdb

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey

msvcr71

_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
__dllonexit
__p__commode
__p__fmode
__set_app_type
_controlfp
?terminate@@YAXXZ
??1type_info@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
_callnewh
malloc
_splitpath
_except_handler3
__p___argv
__p___argc
_putenv
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z
calloc
free
printf
_stat
_snprintf
memmove
_mbslwr
_mbsnbcmp
_mbschr
_mbsnbcpy
_mbsrchr
_mbsstr
_mbscmp
__security_error_handler
memset
_adjust_fdiv

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
lstrlenW
GetProcAddress
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
CreateFileA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetShortPathNameA
GetLongPathNameA
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateProcessA
WaitForSingleObject
GetEnvironmentVariableA
GetLastError
GetSystemTimeAsFileTime

user32

wsprintfA

ole32

CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

05ae66ed0a6de25ca26c2cb318f9f9f8

Headers

File Characteristics

PDB Paths

Imports

advapi32

msvcr71

kernel32

user32

ole32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 884B

.rsrc Size: 74KB - Virtual size: 76KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 884B

.rsrc
Size: 74KB - Virtual size: 76KB