1bb537b376eb84ca0b6efa8811e2c6dc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1bb537b376eb84ca0b6efa8811e2c6dc_JaffaCakes118
Size

19KB
MD5

1bb537b376eb84ca0b6efa8811e2c6dc
SHA1

7a89e346e09f0b8ef9862391aea1852d26aee58e
SHA256

92d9e8b45e11e8b4f0803fd625abf216795c3f803ce7f158136be9f3bb42b7c5
SHA512

0519847bc5d5c0f88acca7ec10906e79c5f1b1a252c178f12c274707726e829b3562d2bdf908de0b88da27a4a7893d804c4c6094c26220d8a0b18f7f7a7caaf4
SSDEEP

384:vBUR5px8771777J95YeaAMb8TTwQo5L+Fk564ZO+Su9+yz9Itf:vBUpeYeuL+D4tDgf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb537b376eb84ca0b6efa8811e2c6dc_JaffaCakes118

Files

1bb537b376eb84ca0b6efa8811e2c6dc_JaffaCakes118
.dll windows:5 windows x86 arch:x86

84d81cb9234e9439a65436f032f56dfc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

o:\OOO320\src\bridges\wntmsci12.pro\bin\rmcxt3.pdb

Imports

msvcr90

_except_handler4_common
_onexit
_crt_debugger_hook
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??2@YAPAXI@Z
memset
_CxxThrowException
??3@YAXPAX@Z
__CxxFrameHandler3

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange

sal3

osl_createMutex
osl_destroyMutex
osl_acquireMutex
osl_releaseMutex
osl_getGlobalMutex
osl_decrementInterlockedCount
rtl_uString_assign
rtl_ustr_hashCode_WithLength
osl_incrementInterlockedCount
rtl_ustr_compare_WithLength
rtl_uString_release
rtl_uString_acquire

stlport_vc7145

?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
??1?$allocator@PAX@_STL@@QAE@XZ
??1?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
?swap@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXAAV12@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@IABQAXABV?$allocator@PAX@1@@Z
?get_allocator@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QBE?AV?$allocator@PAX@2@XZ
?_M_fill_insert@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXPAPAXIABQAX@Z
?reserve@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXI@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z

Exports

Exports

GetVersionInfo
remote_addContextListener
remote_createContext
remote_getContext
remote_getContextList
remote_removeContextListener

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84d81cb9234e9439a65436f032f56dfc

Headers

File Characteristics

PDB Paths

Imports

msvcr90

kernel32

sal3

stlport_vc7145

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 842B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 842B