0a1510bae495f656d63723eaa2aed1c6_JaffaCakes118

General

Target

0a1510bae495f656d63723eaa2aed1c6_JaffaCakes118
Size

44KB
MD5

0a1510bae495f656d63723eaa2aed1c6
SHA1

dd8a82e160bc730d10eb4155a383cd8ddf4c6400
SHA256

425e86725553831bf981d5d45d011a6621631314019dd2935dcfbad816c8bd00
SHA512

ff05cd013f05afde531c18f79c63db1bf70b082cd513ffdf55e14db699963f3163f6a5811898ff32f4ce28b2061f9b46a5e7718775b6a6b64eae75684a48cec9
SSDEEP

384:UDZj3g7QNaDrT7islNJG+isrAz0x6o0l+uDrDNSusuCJADPaUOnu46io6GarcJWG:i3W1lNJGCAa6o0l+uDrBMJIPBE67WG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1510bae495f656d63723eaa2aed1c6_JaffaCakes118

Files

0a1510bae495f656d63723eaa2aed1c6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a7cb42ff04d0b85266165cac1b2c1089

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\Steve\Desktop\Mombots Complete For Sale\CoD 2 Multiversion\Build\CoD 2.pdb

Imports

kernel32

LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcess
FlushInstructionCache
SetLastError
GetCurrentProcessId

user32

MessageBoxA

winmm

PlaySoundA

msvcr80

memcpy
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
??2@YAPAXI@Z
??3@YAXPAX@Z
vsprintf_s
sprintf
strstr
_CIsqrt
_CIsin
_CIcos
free
_CIatan2

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7cb42ff04d0b85266165cac1b2c1089

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

winmm

msvcr80

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 70KB

.rsrc Size: 4KB - Virtual size: 428B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 70KB

.rsrc
Size: 4KB - Virtual size: 428B

.reloc
Size: 4KB - Virtual size: 3KB