41470b8ae8654cc5b6b9045f05e98fb3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

41470b8ae8654cc5b6b9045f05e98fb3_JaffaCakes118
Size

118KB
MD5

41470b8ae8654cc5b6b9045f05e98fb3
SHA1

92ee2c27c1eb190b05edecf24eb87bfa14300a12
SHA256

c794f96b1cfa8af20513c8e7a8968d9004c75d47154e021ac1ec517785860000
SHA512

8c94184928f8f70259434ac65528e47f12c8e5d9609cb3c7a49e3404721b80c880b3d61629dfd81e0d5a135574537c5bec44ced57652ee201b8ab71fad0652ef
SSDEEP

3072:BzzUFrl5vQauq3BRdjFhicv75O6GV3rBBNBsBdBaB4BUe:erl5vQ9ebNW9rBBNBsBdBaB4Bp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41470b8ae8654cc5b6b9045f05e98fb3_JaffaCakes118

Files

41470b8ae8654cc5b6b9045f05e98fb3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

724169a96a6bb9137189de22be4021bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

cygsvn_delta-1-0

svn_compat_wrap_file_rev_handler
svn_delta_default_editor
svn_delta_depth_filter_editor
svn_delta_version
svn_txdelta_parse_svndiff
svn_txdelta_to_svndiff2

cygwin1

__assert_func
__getreent
_impure_ptr
atol
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
free
malloc
memset
realloc
strcmp
strlen
strtol

cygapr-1-0

apr_array_make
apr_array_pop
apr_array_push
apr_atoi64
apr_collapse_spaces
apr_cpystrn
apr_file_close
apr_file_info_get
apr_file_write_full
apr_hash_count
apr_hash_first
apr_hash_get
apr_hash_make
apr_hash_next
apr_hash_pool_get
apr_hash_set
apr_hash_this
apr_ltoa
apr_palloc
apr_pmemdup
apr_pool_cleanup_kill
apr_pool_cleanup_null
apr_pool_cleanup_register
apr_pool_cleanup_run
apr_pool_clear
apr_pool_create_ex
apr_pool_destroy
apr_psprintf
apr_pstrcat
apr_pstrdup
apr_pstrmemdup
apr_strtok

cygaprutil-1-0

apr_uri_parse
apr_xml_quote_string

cygintl-8

libintl_dgettext

cygneon-27

ne_accept_207
ne_accept_2xx
ne_add_proxy_auth
ne_add_request_header
ne_add_response_body_reader
ne_add_server_auth
ne_debug_init
ne_decompress_destroy
ne_decompress_reader
ne_get_content_type
ne_get_error
ne_get_response_header
ne_get_scheme
ne_get_server_hostport
ne_get_status
ne_has_support
ne_parse_statusline
ne_request_create
ne_request_destroy
ne_request_dispatch
ne_session_create
ne_session_destroy
ne_session_proxy
ne_set_connect_timeout
ne_set_progress
ne_set_proxy_auth
ne_set_read_timeout
ne_set_request_body_buffer
ne_set_request_body_provider
ne_set_useragent
ne_sock_init
ne_ssl_cert_digest
ne_ssl_cert_export
ne_ssl_cert_identity
ne_ssl_cert_issuer
ne_ssl_cert_read
ne_ssl_cert_validity
ne_ssl_clicert_decrypt
ne_ssl_clicert_encrypted
ne_ssl_clicert_read
ne_ssl_pkcs11_provider_destroy
ne_ssl_pkcs11_provider_init
ne_ssl_pkcs11_provider_pin
ne_ssl_provide_clicert
ne_ssl_readable_dname
ne_ssl_set_clicert
ne_ssl_set_pkcs11_provider
ne_ssl_set_verify
ne_ssl_trust_cert
ne_ssl_trust_default_ca
ne_uri_defaultport
ne_uri_free
ne_uri_parse
ne_uri_unparse
ne_xml_create
ne_xml_destroy
ne_xml_get_attr
ne_xml_get_error
ne_xml_parse
ne_xml_parse_v
ne_xml_push_handler
ne_xml_set_error

kernel32

GetModuleHandleA
GetProcAddress

cygsvn_subr-1-0

svn__apr_hash_index_key
svn__apr_hash_index_val
svn_atomic__init_once
svn_auth_first_credentials
svn_auth_next_credentials
svn_auth_save_credentials
svn_auth_set_parameter
svn_base64_decode
svn_base64_decode_string
svn_base64_encode_string2
svn_checksum_ctx_create
svn_checksum_final
svn_checksum_to_cstring_display
svn_checksum_update
svn_compat_log_revprops_in
svn_compat_wrap_commit_callback
svn_compat_wrap_log_receiver
svn_config_find_group
svn_config_get
svn_config_get_bool
svn_config_get_server_setting
svn_config_get_server_setting_bool
svn_create_commit_info
svn_cstring_atoi
svn_cstring_atoi64
svn_cstring_casecmp
svn_cstring_match_glob_list
svn_cstring_match_list
svn_cstring_split
svn_depth_to_word
svn_dirent_local_style
svn_error__malfunction
svn_error_clear
svn_error_compose
svn_error_compose_create
svn_error_create
svn_error_createf
svn_error_quick_wrap
svn_error_wrap_apr
svn_fspath__basename
svn_fspath__canonicalize
svn_fspath__is_ancestor
svn_fspath__is_child
svn_inheritance_to_word
svn_io_file_close
svn_io_file_read
svn_io_file_seek
svn_io_file_write_full
svn_io_open_unique_file3
svn_lock_create
svn_log_changed_path2_create
svn_log_entry_create
svn_mergeinfo_parse
svn_node_kind_from_word
svn_path_add_component
svn_path_component_count
svn_path_is_empty
svn_path_is_url
svn_path_remove_component
svn_path_remove_components
svn_path_uri_decode
svn_path_url_add_component2
svn_pool_create_ex
svn_relpath__is_child
svn_relpath_basename
svn_relpath_canonicalize
svn_relpath_join
svn_stream_close
svn_stream_create
svn_stream_open_readonly
svn_stream_read
svn_stream_set_write
svn_stream_write
svn_string_create
svn_string_create_from_buf
svn_string_dup
svn_stringbuf__morph_into_string
svn_stringbuf_appendbytes
svn_stringbuf_appendcstr
svn_stringbuf_appendstr
svn_stringbuf_create
svn_stringbuf_createf
svn_stringbuf_dup
svn_stringbuf_ensure
svn_stringbuf_isempty
svn_stringbuf_ncreate
svn_stringbuf_set
svn_stringbuf_setempty
svn_subr_version
svn_time_from_cstring
svn_time_to_cstring
svn_tristate__from_word
svn_uri__is_child
svn_uri_canonicalize
svn_uri_is_canonical
svn_uri_skip_ancestor
svn_urlpath__canonicalize
svn_utf_cstring_to_utf8
svn_uuid_generate
svn_ver_check_list
svn_xml_escape_attr_cstring
svn_xml_escape_cdata_cstring
svn_xml_escape_cdata_string
svn_xml_get_attr_value
svn_xml_is_xml_safe

Exports

Exports

svn_ra_dav_init
svn_ra_neon__add_depth_header
svn_ra_neon__add_response_body_reader
svn_ra_neon__assemble_locktoken_body
svn_ra_neon__change_rev_prop
svn_ra_neon__check_parse_error
svn_ra_neon__checked_in_prop
svn_ra_neon__copy
svn_ra_neon__copy_href
svn_ra_neon__do_check_path
svn_ra_neon__do_diff
svn_ra_neon__do_proppatch
svn_ra_neon__do_stat
svn_ra_neon__do_status
svn_ra_neon__do_switch
svn_ra_neon__do_update
svn_ra_neon__exchange_capabilities
svn_ra_neon__get_activity_collection
svn_ra_neon__get_baseline_info
svn_ra_neon__get_baseline_props
svn_ra_neon__get_commit_editor
svn_ra_neon__get_dated_revision
svn_ra_neon__get_deadprop_count_support
svn_ra_neon__get_deleted_rev
svn_ra_neon__get_dir
svn_ra_neon__get_file
svn_ra_neon__get_file_revs
svn_ra_neon__get_latest_revnum
svn_ra_neon__get_location_segments
svn_ra_neon__get_locations
svn_ra_neon__get_lock
svn_ra_neon__get_lock_internal
svn_ra_neon__get_locks
svn_ra_neon__get_log
svn_ra_neon__get_mergeinfo
svn_ra_neon__get_one_prop
svn_ra_neon__get_path_relative_to_root
svn_ra_neon__get_props
svn_ra_neon__get_props_resource
svn_ra_neon__get_starting_props
svn_ra_neon__get_vcc
svn_ra_neon__has_capability
svn_ra_neon__init
svn_ra_neon__lock
svn_ra_neon__lookup_xml_elem
svn_ra_neon__maybe_store_auth_info
svn_ra_neon__maybe_store_auth_info_after_result
svn_ra_neon__merge_activity
svn_ra_neon__parsed_request
svn_ra_neon__replay
svn_ra_neon__replay_range
svn_ra_neon__request_create
svn_ra_neon__request_dispatch
svn_ra_neon__request_get_location
svn_ra_neon__rev_prop
svn_ra_neon__rev_proplist
svn_ra_neon__search_for_starting_props
svn_ra_neon__set_neon_body_provider
svn_ra_neon__simple_request
svn_ra_neon__unlock
svn_ra_neon__uri_unparse
svn_ra_neon__vcc_prop
svn_ra_neon__xml_collect_cdata
svn_ra_neon__xml_parser_create

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 280B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

724169a96a6bb9137189de22be4021bf

Headers

File Characteristics

Imports

cygsvn_delta-1-0

cygwin1

cygapr-1-0

cygaprutil-1-0

cygintl-8

cygneon-27

kernel32

cygsvn_subr-1-0

Exports

Exports

Sections

.text Size: 79KB - Virtual size: 79KB

.data Size: 22KB - Virtual size: 21KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 280B

.edata Size: 2KB - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 79KB - Virtual size: 79KB

.data
Size: 22KB - Virtual size: 21KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 280B

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 4KB