3f4a660f4c0f56d2bf127cf63d493d4d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3f4a660f4c0f56d2bf127cf63d493d4d_JaffaCakes118
Size

119KB
MD5

3f4a660f4c0f56d2bf127cf63d493d4d
SHA1

d76304ac979882c4a9bc6fcce06d2c559e5b30d9
SHA256

fd81c5f08fdbd05349eb2aba6be598e0525f2f1fb7bbb8a30c2a321e90d578c0
SHA512

26ae59d25ddf0dd57b3115e815baf58792fc83ef342b38f885b25c427e62991c9c974a7f5332dbbe9ef73b717e3bb97456273cc6c4b8697da3fc38610b0e4f68
SSDEEP

3072:nl8JWaPrinlfEzSom/L/5BgjnLrOt/Oc7:nwilfysoLOtm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f4a660f4c0f56d2bf127cf63d493d4d_JaffaCakes118

Files

3f4a660f4c0f56d2bf127cf63d493d4d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

be27d94600c9becfca1465135e62684c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\AOO\sources\builds\main\cli_ure\wntmsci12.pro\bin\cli_uno.pdb

Imports

msvcr90

__clean_type_info_names_internal
_unlock
__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_onexit
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
?what@exception@std@@UBEPBDXZ
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
_lock
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBDH@Z
_CxxThrowException
_cexit
__FrameUnwindFilter
??1exception@std@@UAE@XZ

kernel32

UnhandledExceptionFilter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange

cppu3

uno_destructData
uno_type_destructData
typelib_typedescription_complete
uno_any_construct
uno_any_destruct
typelib_static_type_init
typelib_typedescription_equals
typelib_typedescription_getByName
typelib_typedescriptionreference_new
typelib_typedescription_release
typelib_typedescriptionreference_getDescription
typelib_typedescriptionreference_release
uno_registerMapping
uno_revokeMapping
uno_type_any_construct
typelib_typedescriptionreference_acquire
typelib_typedescription_acquire
typelib_static_type_getByTypeClass

sal3

rtl_ustr_compare_WithLength
rtl_ustr_indexOfChar_WithLength
rtl_ustr_shortenedCompare_WithLength
rtl_allocateMemory
rtl_freeMemory
rtl_uStringbuffer_insert_ascii
rtl_uStringbuffer_insert
rtl_uString_new_WithLength
rtl_ustr_reverseCompare_WithLength
rtl_uString_assign
rtl_string2UString
rtl_uString_newFromStr_WithLength
rtl_uString_new
osl_incrementInterlockedCount
osl_decrementInterlockedCount
rtl_ustr_asciil_reverseEquals_WithLength
rtl_uString_release
rtl_uString_acquire
rtl_string_acquire
rtl_uStringbuffer_newFromStringBuffer
rtl_uString_newConcat

msvcm90

?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z

mscoree

_CorDllMain

Exports

Exports

GetVersionInfo
component_canUnload
uno_ext_getMapping
uno_initEnvironment

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be27d94600c9becfca1465135e62684c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr90

kernel32

cppu3

sal3

msvcm90

mscoree

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 66KB - Virtual size: 66KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 66KB - Virtual size: 66KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB