d02b8f5974e623aa1afb3327450c6795_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d02b8f5974e623aa1afb3327450c6795_JaffaCakes118
Size

235KB
MD5

d02b8f5974e623aa1afb3327450c6795
SHA1

e52437511e2dfe0a47faed530bd62e0cfa0be848
SHA256

3360897c6e8616ab87d9946c77a53fb28d1ccadf00434561f9989a378d653d43
SHA512

31134fea7e546d04d9e389078fff13c3598dcbaa2df3d5efd68d48d93881c9badf97fd1aa4a5e7c2c202d0c97e72b64b4366d3f49dc804a514f6c9b94a5fb2aa
SSDEEP

6144:t3YzztFfejLFKm9zdM3oJAr/RV1myyyprAtQ/1/DIR:RWGLFKMz+hRV1my9PD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d02b8f5974e623aa1afb3327450c6795_JaffaCakes118

Files

d02b8f5974e623aa1afb3327450c6795_JaffaCakes118
.dll windows:4 windows x86 arch:x86

33dcb2647b52243161bc9072778e04f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILD_~1\jdk6_21\control\build\WINDOW~1\tmp\sun\javax.sound\jsoundds\obj\jsoundds.pdb

Imports

winmm

timeGetTime

user32

GetForegroundWindow
GetDesktopWindow

dsound

ord7
ord1
ord6
ord2

msvcr71

memset
strncpy
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
memcmp
malloc
free
strcpy
memcpy

kernel32

CreateEventA
InitializeCriticalSection
DisableThreadLibraryCalls
CreateThread
EnterCriticalSection
SetEvent
CloseHandle
LeaveCriticalSection
WaitForSingleObject

Exports

Exports

_Java_com_sun_media_sound_DirectAudioDeviceProvider_nGetNumDevices@8
_Java_com_sun_media_sound_DirectAudioDeviceProvider_nNewDirectAudioDeviceInfo@12
_Java_com_sun_media_sound_DirectAudioDevice_nAvailable@20
_Java_com_sun_media_sound_DirectAudioDevice_nClose@20
_Java_com_sun_media_sound_DirectAudioDevice_nFlush@20
_Java_com_sun_media_sound_DirectAudioDevice_nGetBufferSize@20
_Java_com_sun_media_sound_DirectAudioDevice_nGetBytePosition@28
_Java_com_sun_media_sound_DirectAudioDevice_nGetFormats@24
_Java_com_sun_media_sound_DirectAudioDevice_nIsStillDraining@20
_Java_com_sun_media_sound_DirectAudioDevice_nOpen@52
_Java_com_sun_media_sound_DirectAudioDevice_nRead@32
_Java_com_sun_media_sound_DirectAudioDevice_nRequiresServicing@20
_Java_com_sun_media_sound_DirectAudioDevice_nService@20
_Java_com_sun_media_sound_DirectAudioDevice_nSetBytePosition@28
_Java_com_sun_media_sound_DirectAudioDevice_nStart@20
_Java_com_sun_media_sound_DirectAudioDevice_nStop@20
_Java_com_sun_media_sound_DirectAudioDevice_nWrite@40

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

33dcb2647b52243161bc9072778e04f3

Headers

File Characteristics

PDB Paths

Imports

winmm

user32

dsound

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 1024B - Virtual size: 610B

.text Size: 108KB - Virtual size: 112KB

.text Size: 108KB - Virtual size: 112KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 1024B - Virtual size: 610B

.text
Size: 108KB - Virtual size: 112KB

.text
Size: 108KB - Virtual size: 112KB