aadf44efe48bb835a2cc8b2bc5f68ca3_JaffaCakes118

General

Target

aadf44efe48bb835a2cc8b2bc5f68ca3_JaffaCakes118
Size

188KB
MD5

aadf44efe48bb835a2cc8b2bc5f68ca3
SHA1

2fa643cad6c63c71d4a080de4a70dce7be899967
SHA256

3dbceb2df6dbd65beba0b0150bab0ecf85d512214802366ad956c6a868c101ad
SHA512

56afb723e3046f738ee7685442f6aeb7b41683c0fdc280901efee90cdc561eca1fadb148b54d5462e53a93d0b730fdc0b469641baf6dafb48aba93b49a49d503
SSDEEP

3072:EjHbbLm2QC9FdtoRWxbtzS1apqYG8jwphSwvfpawFoJDAf2QQj9/nepxhV:cq9C9X3xVHG8EnSEpawFWAf23j9WpxhV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aadf44efe48bb835a2cc8b2bc5f68ca3_JaffaCakes118

Files

aadf44efe48bb835a2cc8b2bc5f68ca3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cfc2cacd3e5bbcb7583e00e0cf4ef8ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

jawt

_JAWT_GetAWT@8

msvcrt

free
_initterm
malloc
_adjust_fdiv

kernel32

DisableThreadLibraryCalls

Exports

Exports

_Java_com_sun_opengl_impl_JAWTFactory_JAWT_1GetAWT0__Ljava_nio_ByteBuffer_2@12
_Java_com_sun_opengl_impl_JAWT_1DrawingSurfaceInfo_platformInfo0@12
_Java_com_sun_opengl_impl_JAWT_1DrawingSurface_FreeDrawingSurfaceInfo0__Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2@16
_Java_com_sun_opengl_impl_JAWT_1DrawingSurface_GetDrawingSurfaceInfo0__Ljava_nio_ByteBuffer_2@12
_Java_com_sun_opengl_impl_JAWT_1DrawingSurface_Lock0__Ljava_nio_ByteBuffer_2@12
_Java_com_sun_opengl_impl_JAWT_1DrawingSurface_Unlock0__Ljava_nio_ByteBuffer_2@12
_Java_com_sun_opengl_impl_JAWT_FreeDrawingSurface0__Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2@16
_Java_com_sun_opengl_impl_JAWT_GetDrawingSurface0__Ljava_nio_ByteBuffer_2Ljava_lang_Object_2@16
_Java_com_sun_opengl_impl_JAWT_Lock0__Ljava_nio_ByteBuffer_2@12
_Java_com_sun_opengl_impl_JAWT_Unlock0__Ljava_nio_ByteBuffer_2@12

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cfc2cacd3e5bbcb7583e00e0cf4ef8ee

Headers

File Characteristics

Imports

jawt

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 36B

.reloc Size: 4KB - Virtual size: 98B

.text Size: 168KB - Virtual size: 168KB

.text
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 36B

.reloc
Size: 4KB - Virtual size: 98B

.text
Size: 168KB - Virtual size: 168KB