c8ea16e2e9c08653f1a6c078b5fff032_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c8ea16e2e9c08653f1a6c078b5fff032_JaffaCakes118
Size

159KB
MD5

c8ea16e2e9c08653f1a6c078b5fff032
SHA1

852e1fb0cc3ca49418ba283fac1410077b336ff9
SHA256

0b259c57e3616735bed6917a0c5169edd13e4cb93c10f868eee4256a8b9623ba
SHA512

6f687924db4ad7927bcb3a5f98c8548ef83b4863166c93bb56370f99c043b1a4d5706fb5196ec9aa924769377086a88ed39f1b0705a77ef556dbe61eee56088a
SSDEEP

3072:wrg/UVf7Yv+bzI4TwE3Wen1GnKWgmIKnufATVDmStL23rtyK54Jph8mf:M71XGenA+Knu4hq6CbtzopiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8ea16e2e9c08653f1a6c078b5fff032_JaffaCakes118

Files

c8ea16e2e9c08653f1a6c078b5fff032_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c28d95c08c7252fad1aa8da162264cf0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILD_~1\jdk6_15\control\build\WINDOW~1\tmp\sun\sun.security.mscapi\sunmscapi\obj\sunmscapi.pdb

Imports

crypt32

CryptImportPublicKeyInfo
CertFindCertificateInStore
CertDeleteCertificateFromStore
CertCreateCertificateContext
CertSetCertificateContextProperty
CertAddCertificateContextToStore
CertFreeCertificateContext
CertOpenSystemStoreA
CertGetCertificateChain
CertEnumCertificatesInStore
CryptAcquireCertificatePrivateKey
CertGetPublicKeyLength
CertGetNameStringA
CertFreeCertificateChain
CertCloseStore

advapi32

CryptVerifySignatureA
CryptImportKey
CryptExportKey
CryptEncrypt
CryptDecrypt
CryptGetProvParam
CryptGenKey
CryptCreateHash
CryptSetHashParam
CryptSignHashA
CryptDestroyHash
CryptDestroyKey
CryptGetUserKey
CryptSetKeyParam
CryptGetKeyParam
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom

msvcr71

sprintf
mbstowcs
memcpy
free
_initterm
_except_handler3
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
strcmp

kernel32

GetLastError
FormatMessageA
DisableThreadLibraryCalls

Exports

Exports

_Java_sun_security_mscapi_KeyStore_destroyKeyContainer@12
_Java_sun_security_mscapi_KeyStore_generatePrivateKeyBlob@44
_Java_sun_security_mscapi_KeyStore_getKeyLength@16
_Java_sun_security_mscapi_KeyStore_loadKeysOrCertificateChains@16
_Java_sun_security_mscapi_KeyStore_removeCertificate@24
_Java_sun_security_mscapi_KeyStore_storeCertificate@40
_Java_sun_security_mscapi_KeyStore_storePrivateKey@20
_Java_sun_security_mscapi_Key_cleanUp@24
_Java_sun_security_mscapi_Key_getContainerName@16
_Java_sun_security_mscapi_Key_getKeyType@16
_Java_sun_security_mscapi_PRNG_generateSeed@16
_Java_sun_security_mscapi_RSACipher_encryptDecrypt@28
_Java_sun_security_mscapi_RSACipher_findCertificateUsingAlias@16
_Java_sun_security_mscapi_RSACipher_getKeyFromCert@20
_Java_sun_security_mscapi_RSAKeyPairGenerator_generateRSAKeyPair@16
_Java_sun_security_mscapi_RSAPublicKey_getExponent@12
_Java_sun_security_mscapi_RSAPublicKey_getModulus@12
_Java_sun_security_mscapi_RSAPublicKey_getPublicKeyBlob@16
_Java_sun_security_mscapi_RSASignature_generatePublicKeyBlob@20
_Java_sun_security_mscapi_RSASignature_importPublicKey@16
_Java_sun_security_mscapi_RSASignature_signHash@36
_Java_sun_security_mscapi_RSASignature_verifySignedHash@44

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c28d95c08c7252fad1aa8da162264cf0

Headers

File Characteristics

PDB Paths

Imports

crypt32

advapi32

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 40B

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 1024B - Virtual size: 616B

.text Size: 143KB - Virtual size: 144KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 40B

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 1024B - Virtual size: 616B

.text
Size: 143KB - Virtual size: 144KB