00c2d6c12514e120f862d8cbe61854d9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

00c2d6c12514e120f862d8cbe61854d9_JaffaCakes118
Size

102KB
MD5

00c2d6c12514e120f862d8cbe61854d9
SHA1

f74c62422b544770f55bf2edf91adea4902d0354
SHA256

343dad0063e025f4b24ca6c596ef6b9a8e8c4ba5a9e980ed88d2ea2c3b4ec3c6
SHA512

0448f7bb496d7f3a8102be854823cc44b0aee9668a8904ac9716d3955db141925fc7493f3327533dceba8dad2a80244898997cd57c514722d39b98bc79a9ec8e
SSDEEP

3072:1Or3OxgTgMf7+VsWUUIsJS9fZIVbTkimSSsAe:8KgTgMCVDJdsKV7WJe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c2d6c12514e120f862d8cbe61854d9_JaffaCakes118

Files

00c2d6c12514e120f862d8cbe61854d9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

418044bd60264b0151bfe8951f7e62d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

EnsureUTF8
dialog_VFatal
var_Inherit
vlc_Log
vlc_fopen
vlc_gettext
vlc_meta_AddExtra
vlc_meta_Delete
vlc_meta_Merge
vlc_meta_New
vlc_meta_Set
vlc_open
vlc_stat

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_fstat
_putenv
_read
_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_commit
_errno
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fstati64
_fullpath
_iob
_isctype
_lseeki64
_pctype
_stricmp
abort
atof
calloc
fclose
fflush
fgetc
fputc
fread
free
fseek
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
memmove
realloc
sscanf
strcat
strchr
strcpy
strftime
strlen
strpbrk
strrchr
strspn
toupper
vfprintf
wcslen

Exports

Exports

vlc_entry__1_2_0l
vlc_entry_copyright__1_2_0l
vlc_entry_license__1_2_0l

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

418044bd60264b0151bfe8951f7e62d6

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 167B

.idata Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 988B

.gnu_deb Size: 56KB - Virtual size: 56KB

.text
Size: 38KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 167B

.idata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 988B

.gnu_deb
Size: 56KB - Virtual size: 56KB