0c8c7e54a6cc1cc8646e5f990572b881_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c8c7e54a6cc1cc8646e5f990572b881_JaffaCakes118
Size

128KB
MD5

0c8c7e54a6cc1cc8646e5f990572b881
SHA1

24d4245fa0037f99503335c87f09df08873ba48c
SHA256

bc557ccadcee9652d6485fe30d278e5048e196426036153b0df15bfa0eafd3a4
SHA512

12dfe51fb6bcf3096f7ca705ad24205364e426f94b71a8327c32bc7865ab2723889b19ca497a9bacd18375eea760d54fb61cd62309aea9ce746655f0c82daa2f
SSDEEP

3072:KjFLJPWmn6xmC+qUw6YT8M7nkHdJvCvNBU:KjFLJv6Ww6s8M7kHfCvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8c7e54a6cc1cc8646e5f990572b881_JaffaCakes118

Files

0c8c7e54a6cc1cc8646e5f990572b881_JaffaCakes118
.dll windows:4 windows x86 arch:x86

28192dac418cd3cf6362cce9a5022a60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

osg25-osg

?setFileName@Image@osg@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?resizeGLObjectBuffers@Object@osg@@UAEXI@Z
?computeDataVariance@Object@osg@@UAEXXZ
?setThreadSafeRefUnref@Referenced@osg@@UAEX_N@Z
?unref@Referenced@osg@@QBEXXZ
?ref@Referenced@osg@@QBEXXZ
??0CopyOp@osg@@QAE@I@Z
??0Image@osg@@QAE@ABV01@ABVCopyOp@1@@Z
??1CopyOp@osg@@UAE@XZ
?flipVertical@Image@osg@@QAEXXZ
?data@Image@osg@@QAEPAEXZ
?t@Image@osg@@QBEHXZ
?s@Image@osg@@QBEHXZ
?releaseGLObjects@Object@osg@@UBEXPAVState@2@@Z
??1Image@osg@@MAE@XZ
??0Image@osg@@QAE@XZ
?setImage@Image@osg@@QAEXHHHHIIPAEW4AllocationMode@12@H@Z
?cloneType@Image@osg@@UBEPAVObject@2@XZ
?clone@Image@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?isSameKindAs@Image@osg@@UBE_NPBVObject@2@@Z
?libraryName@Image@osg@@UBEPBDXZ
?className@Image@osg@@UBEPBDXZ
?compare@Image@osg@@UBEHABV12@@Z

osg25-osgdb

?addReaderWriter@Registry@osgDB@@QAEXPAVReaderWriter@2@@Z
?instance@Registry@osgDB@@SAPAV12@_N@Z
?writeNode@ReaderWriter@osgDB@@UBE?AVWriteResult@12@ABVNode@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?writeNode@ReaderWriter@osgDB@@UBE?AVWriteResult@12@ABVNode@osg@@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PBVOptions@12@@Z
?writeHeightField@ReaderWriter@osgDB@@UBE?AVWriteResult@12@ABVHeightField@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?writeHeightField@ReaderWriter@osgDB@@UBE?AVWriteResult@12@ABVHeightField@osg@@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PBVOptions@12@@Z
?writeObject@ReaderWriter@osgDB@@UBE?AVWriteResult@12@ABVObject@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?writeObject@ReaderWriter@osgDB@@UBE?AVWriteResult@12@ABVObject@osg@@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PBVOptions@12@@Z
?readNode@ReaderWriter@osgDB@@UBE?AVReadResult@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?readNode@ReaderWriter@osgDB@@UBE?AVReadResult@12@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@PBVOptions@12@@Z
?readHeightField@ReaderWriter@osgDB@@UBE?AVReadResult@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?readHeightField@ReaderWriter@osgDB@@UBE?AVReadResult@12@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@PBVOptions@12@@Z
?readObject@ReaderWriter@osgDB@@UBE?AVReadResult@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?readObject@ReaderWriter@osgDB@@UBE?AVReadResult@12@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@PBVOptions@12@@Z
?openArchive@ReaderWriter@osgDB@@UBE?AVReadResult@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4ArchiveStatus@12@IPBVOptions@12@@Z
?openArchive@ReaderWriter@osgDB@@UBE?AVReadResult@12@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@PBVOptions@12@@Z
?libraryName@ReaderWriter@osgDB@@UBEPBDXZ
?isSameKindAs@ReaderWriter@osgDB@@UBE_NPBVObject@osg@@@Z
?clone@ReaderWriter@osgDB@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?cloneType@ReaderWriter@osgDB@@UBEPAVObject@osg@@XZ
??0ReaderWriter@osgDB@@QAE@XZ
?equalCaseInsensitive@osgDB@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z
??0ReadResult@ReaderWriter@osgDB@@QAE@PAVObject@osg@@W4ReadStatus@012@@Z
??0ReadResult@ReaderWriter@osgDB@@QAE@W4ReadStatus@012@@Z
??1ReadResult@ReaderWriter@osgDB@@QAE@XZ
??0ReadResult@ReaderWriter@osgDB@@QAE@ABV012@@Z
?getImage@ReadResult@ReaderWriter@osgDB@@QAEPAVImage@osg@@XZ
?validImage@ReadResult@ReaderWriter@osgDB@@QAE_NXZ
?findDataFile@osgDB@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@PBVOptions@ReaderWriter@1@W4CaseSensitivity@1@@Z
?getLowerCaseFileExtension@osgDB@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?getFileExtension@osgDB@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??1ReaderWriter@osgDB@@UAE@XZ
?removeReaderWriter@Registry@osgDB@@QAEXPAVReaderWriter@2@@Z

msvcp71

?_Nomemory@std@@YAXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??Bios_base@std@@QBEPAXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??7ios_base@std@@QBE_NXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBEHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?bad@ios_base@std@@QBE_NXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?width@ios_base@std@@QBEHXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ

msvcr71

sprintf
memcmp
?terminate@@YAXXZ
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
_callnewh
free
malloc
getenv
sscanf
strncpy
_iob
fprintf
exit
??3@YAXPAX@Z
_CxxThrowException
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
memcpy
longjmp
_setjmp3

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28192dac418cd3cf6362cce9a5022a60

Headers

File Characteristics

Imports

osg25-osg

osg25-osgdb

msvcp71

msvcr71

kernel32

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 3KB