10ddc57c3245ce884345724e1c3e0ddb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

10ddc57c3245ce884345724e1c3e0ddb_JaffaCakes118
Size

149KB
MD5

10ddc57c3245ce884345724e1c3e0ddb
SHA1

54591f19387923757e52fadc3a42deac82329f49
SHA256

ef7898f4bf147c58b5ae768e7c367dd3806ef6bad4c71883c77a89a21486d961
SHA512

4dcf5225e5736f286501caa41ad86d911f8f188e71d59f2b615f1241daae51c8081091b6bab30db9c749dd87a27f076e5fbfd38e07783d60ae3f725266aa32e4
SSDEEP

3072:9culWqooG54++VAy2eTBf8pWtrfF6Oa4NH:BooG5eVWeTBkpwUOa4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10ddc57c3245ce884345724e1c3e0ddb_JaffaCakes118

Files

10ddc57c3245ce884345724e1c3e0ddb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f426d4a476d794da94771ea6068f5bcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

EnsureUTF8
decode_URI
dialog_Login
http_auth_FormatAuthorizationHeader
http_auth_Init
http_auth_ParseAuthenticationInfoHeader
http_auth_ParseWwwAuthenticateHeader
http_auth_Reset
net_Connect
net_Gets
net_Printf
net_Read
net_Write
var_Inherit
vlc_Log
vlc_gettext
vlc_meta_Set
vlc_tls_ClientCreate
vlc_tls_ClientDelete

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_fstat
_putenv
_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_atoi64
_commit
_errno
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fullpath
_iob
_isctype
_pctype
_stricmp
_strnicmp
abort
atoi
calloc
fflush
fgetc
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
memmove
realloc
sscanf
strchr
strcmp
strcpy
strlen
strncmp
strpbrk
strrchr
strspn
strstr
toupper
vfprintf
wcslen

ws2_32

closesocket
setsockopt

Exports

Exports

vlc_entry__1_2_0l
vlc_entry_copyright__1_2_0l
vlc_entry_license__1_2_0l

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f426d4a476d794da94771ea6068f5bcb

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

kernel32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 16KB - Virtual size: 16KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 168B

.idata Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.gnu_deb Size: 60KB - Virtual size: 60KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 16KB - Virtual size: 16KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 168B

.idata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB

.gnu_deb
Size: 60KB - Virtual size: 60KB