44eac44bf9d3ccb0af3b697f85fd6a91_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44eac44bf9d3ccb0af3b697f85fd6a91_JaffaCakes118
Size

163KB
MD5

44eac44bf9d3ccb0af3b697f85fd6a91
SHA1

2343c919ca3e4a60943e514f545df7f7cc4c42d2
SHA256

67e704318bf037bf6d8a5b0c439ac7c8ab5fa35e3f7163f6cd98e0f4ac9a1f57
SHA512

fbeb863793dfec8258edb4c50f12e1f7d5baa9a8ad4878bd4806ca893e93ca038a19fe89ffee218c25dc1a00388890faa8f9c52f5958f4c6cf16688d057c1ac2
SSDEEP

3072:7Doh10Y+d0PpfkfS8uvbJNzWSHzI1dPqqMjLfCM69l8ZHwTE:7D41t+dOpfcALk1NqqMHCM6A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44eac44bf9d3ccb0af3b697f85fd6a91_JaffaCakes118

Files

44eac44bf9d3ccb0af3b697f85fd6a91_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ee374c8079b3799c83f7dce0e24db861

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\buildagent\workspace\Skype\ClickToCall\win\c2c-win-release\main\dbsyms\win_msvc10_x86_release\raw\SkypeIEPluginBroker.exe.pdb

Imports

kernel32

LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
SetEvent
GetCommandLineW
SizeofResource
CreateEventW
CreateThread
CloseHandle
WaitForSingleObject
GetStringTypeW
LCMapStringW
WideCharToMultiByte
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
lstrlenW
Sleep
FreeLibrary
LoadLibraryW
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
HeapReAlloc
HeapCreate
GetStdHandle
WriteFile
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
DecodePointer
EncodePointer
HeapFree
HeapAlloc

user32

DispatchMessageW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
PostThreadMessageW
CharUpperW
GetMessageW
TranslateMessage
CharNextW

advapi32

RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW

ole32

CoRevokeClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoAddRefServerProcess
CoReleaseServerProcess
CoUninitialize
StringFromGUID2
CoCreateInstance
CoRegisterClassObject
CoTaskMemFree
CoInitialize

oleaut32

BSTR_UserSize
SysFreeString
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
VarUI4FromStr
SysAllocString
SysStringLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi

rpcrt4

IUnknown_QueryInterface_Proxy
NdrOleFree
NdrStubForwardingFunction
NdrOleAllocate
NdrStubCall2
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
IUnknown_AddRef_Proxy

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 512B - Virtual size: 51B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rorpc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee374c8079b3799c83f7dce0e24db861

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

oleaut32

rpcrt4

Sections

.text Size: 48KB - Virtual size: 48KB

.orpc Size: 512B - Virtual size: 51B

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 7KB - Virtual size: 7KB

.rorpc Size: 72KB - Virtual size: 72KB

.text
Size: 48KB - Virtual size: 48KB

.orpc
Size: 512B - Virtual size: 51B

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 7KB - Virtual size: 7KB

.rorpc
Size: 72KB - Virtual size: 72KB