dce2f6c9aa0147edd0c13625158f2110_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dce2f6c9aa0147edd0c13625158f2110_JaffaCakes118
Size

110KB
MD5

dce2f6c9aa0147edd0c13625158f2110
SHA1

49ae162e29a92f7175d2726c9c8f5b1877163143
SHA256

9a72ccddd6266fe118338a408775f4a3095ee0afb34f23db303f5293e86b8763
SHA512

a02c8b36ee594c19f192cfbc8a18610bd12a735bd03bc6ec114ae95d0cf0f510727ef2ddfdde16ec5f4619c35e00e96f3389d0dc7edc2b057336468897e21fac
SSDEEP

3072:u4oAcaY1gN+Q+Gx+gCbs4JKebmg+WIpzQF4/:u4oXaY1gNuG4gCbs8bqVzQF4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dce2f6c9aa0147edd0c13625158f2110_JaffaCakes118

Files

dce2f6c9aa0147edd0c13625158f2110_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7fb0520193f56925143fa7452e3bbad4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

picture_NewFromFormat
picture_pool_Delete
picture_pool_NewFromFormat
var_Create
var_GetChecked
var_Inherit
vlc_Log
vlc_clone
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_wait
vlc_fourcc_AreUVPlanesSwapped
vlc_join
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_restorecancel
vlc_savecancel
vout_display_PlacePicture
vout_window_Control

gdi32

GetStockObject

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetVersionExA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetThreadExecutionState
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_fstat
_putenv
_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_commit
_errno
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fullpath
_iob
_snprintf
abort
calloc
fflush
fgetc
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
mbstowcs
memchr
memcpy
realloc
sscanf
strchr
strcpy
strlen
strpbrk
strrchr
strspn
tolower
toupper
vfprintf
wcslen

ole32

CoCreateInstance
CoInitialize
CoUninitialize

shell32

ExtractIconA

user32

AdjustWindowRect
AppendMenuA
CheckMenuItem
ClientToScreen
CreateCursor
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EqualRect
GetAncestor
GetClientRect
GetCursorPos
GetKeyState
GetMenuState
GetMessageA
GetMonitorInfoA
GetSystemMenu
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowRect
LoadCursorA
MapVirtualKeyA
MonitorFromWindow
OffsetRect
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseCapture
SetCapture
SetClassLongA
SetCursor
SetCursorPos
SetForegroundWindow
SetParent
SetRectEmpty
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TranslateMessage
UnregisterClassA
ValidateRect
WindowFromPoint

Exports

Exports

vlc_entry__1_2_0l
vlc_entry_copyright__1_2_0l
vlc_entry_license__1_2_0l

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fb0520193f56925143fa7452e3bbad4

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

gdi32

kernel32

msvcrt

ole32

shell32

user32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 165B

.idata Size: 4KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.gnu_deb Size: 56KB - Virtual size: 56KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 165B

.idata
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB

.gnu_deb
Size: 56KB - Virtual size: 56KB