ab32aefb34af49ac7ad0da0563ce0159_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ab32aefb34af49ac7ad0da0563ce0159_JaffaCakes118
Size

94KB
MD5

ab32aefb34af49ac7ad0da0563ce0159
SHA1

b5dbcbf468de82c423914e0843cf5538c282cfae
SHA256

4ee9117c0dd2c15b806b4146097e5625bf7e088152c6daa4e9781c696061987c
SHA512

447823c64aff727345db91506a482a3e8afdc9d779ac7db3bac4d2a71450953a0dc2b168367eeb1a3c9cdc75b5eb1ce3f1f9da63ce00e3a7c86f1d895154233d
SSDEEP

1536:HdeK+mbWZEX4p0NRIqYotBS1nSvVVc03LJOHLyZiyPEmXuNSDqW/gHgur3p0D4:Hj+tZEX4K8eBS9Svb93oHLryPXuNs4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab32aefb34af49ac7ad0da0563ce0159_JaffaCakes118

Files

ab32aefb34af49ac7ad0da0563ce0159_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05ae66ed0a6de25ca26c2cb318f9f9f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BUILD_~1\jdk6_31\control\build\WINDOW~1\tmp\deploy\plugin\jp2launcher\obj\jp2launcher.pdb

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey

msvcr71

_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
__dllonexit
__p__commode
__p__fmode
__set_app_type
_controlfp
?terminate@@YAXXZ
??1type_info@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
_callnewh
malloc
_splitpath
_except_handler3
__p___argv
__p___argc
_putenv
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z
calloc
free
printf
_stat
_snprintf
memmove
_mbslwr
_mbsnbcmp
_mbschr
_mbsnbcpy
_mbsrchr
_mbsstr
_mbscmp
__security_error_handler
memset
_adjust_fdiv

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
lstrlenW
GetProcAddress
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
CreateFileA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetShortPathNameA
GetLongPathNameA
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateProcessA
WaitForSingleObject
GetEnvironmentVariableA
GetLastError
GetSystemTimeAsFileTime

user32

wsprintfA

ole32

CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

05ae66ed0a6de25ca26c2cb318f9f9f8

Headers

File Characteristics

PDB Paths

Imports

advapi32

msvcr71

kernel32

user32

ole32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 884B

.rsrc Size: 74KB - Virtual size: 76KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 884B

.rsrc
Size: 74KB - Virtual size: 76KB