122fa24030ada83f6d9f4784da6e45cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

122fa24030ada83f6d9f4784da6e45cb_JaffaCakes118
Size

70KB
MD5

122fa24030ada83f6d9f4784da6e45cb
SHA1

16f41a233f9a788124371fec27d50481535fe6a7
SHA256

b9ff4bb418dc620f91eb6d594860a52c8b88f8ff08541a330544f70a9d635c83
SHA512

1abd95f95f56c0aca2b07e2d7cead670d7bf5bc86b7a254c85adde5df275b329109df20d28ca56e8791bf430deeeecebf855182cd79ab20d5564747c21339a7a
SSDEEP

1536:1wqSCx210NiUY7yl+5CRjfd01+tujGJm0t9kPjOl1TtDh:Hhw0sO+5kfG0QjGJcP+d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122fa24030ada83f6d9f4784da6e45cb_JaffaCakes118

Files

122fa24030ada83f6d9f4784da6e45cb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

90117542dbef104c8d66ea7dc031fc5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILD_~1\jdk6_22\control\build\WINDOW~1\tmp\sun\java_crw_demo\obj\java_crw_demo.pdb

Imports

msvcr71

_iob
malloc
realloc
calloc
memcpy
free
strlen
strncmp
fprintf
memset
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
strcmp
abort

kernel32

DisableThreadLibraryCalls

Exports

Exports

_java_crw_demo@76
_java_crw_demo_classname@12

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ