d1d9eaf2d4f122c5535b0814b6dcb0da_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d1d9eaf2d4f122c5535b0814b6dcb0da_JaffaCakes118
Size

207KB
MD5

d1d9eaf2d4f122c5535b0814b6dcb0da
SHA1

25a88073130def8d90528409f271ca1cf9187af9
SHA256

45e0f22cc3dcf7da4a8d5450b833367aee00685a8a759b985124dd7e779630b6
SHA512

0d947fda82959318c8621431db2882b5c1600d5e3e4afb4bf1ce59903d2f26bfd795716902cb0150e5f125cc251c2e9e6b0fee4938875434924ae7348f4281de
SSDEEP

6144:x3ClLdWtrn10v3D29BV8/Oj/GXn0lJ+LrTG73NxkEfeyr+Aimft8n2Vr1ufNTv3V:lRqh3OiHWrUW0rgIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1d9eaf2d4f122c5535b0814b6dcb0da_JaffaCakes118

Files

d1d9eaf2d4f122c5535b0814b6dcb0da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

344f93c7bfeb59164de594c0b82473b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

block_Alloc
config_ChainParse
decoder_NewSubpicture
subpicture_region_New
var_Create
var_Destroy
var_GetChecked
vlc_Log

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_fstat
_putenv
_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_commit
_errno
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fullpath
_iob
abort
calloc
fflush
fgetc
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
realloc
sscanf
strchr
strcpy
strlen
strpbrk
strrchr
strspn
toupper
vfprintf
wcslen

Exports

Exports

vlc_entry__1_2_0l
vlc_entry_copyright__1_2_0l
vlc_entry_license__1_2_0l

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

344f93c7bfeb59164de594c0b82473b9

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 163B

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.gnu_deb Size: 56KB - Virtual size: 56KB

.text
Size: 140KB - Virtual size: 140KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 163B

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

.gnu_deb
Size: 56KB - Virtual size: 56KB