6f0e98b3b0541664d418455e97a2ddb9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f0e98b3b0541664d418455e97a2ddb9_JaffaCakes118
Size

372KB
MD5

6f0e98b3b0541664d418455e97a2ddb9
SHA1

abd2f7a9309f85c4562feca53390ccf580593941
SHA256

e252b12789fefd3afe5c0c0176c2e82ee68f7081d765ef2dc65bbcfd4ce5b4e3
SHA512

1556474f0dbddcdc61a9b14c03329be6aac8c3dfb8e404bca6bb4f2cbcbbd49b1dddc5e7dbcd6923fe5127a3029158fa919904eaf1ffb52de2ab8b2cdc499c67
SSDEEP

6144:9iL0NGWpLm7DiY/46HOzCa4T/bhBQgso5g/qmmJG0L7oQ005t7SG+DvHGHfrGd8S:9iL0NGgm7DiYw6HOD4T/bhBQgso5g/qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f0e98b3b0541664d418455e97a2ddb9_JaffaCakes118

Files

6f0e98b3b0541664d418455e97a2ddb9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fb6b83baf80853ce50b7e7c574fdcb0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

metadata

?Create@Metadata@@SAPAV1@PAV1@@Z

utility

?DoubleToShortRect@@YAXABUDRECT@@AAURCT@@FF@Z
?search_for_file@@YA_NPADW4FILETYPE@@@Z
?strcpyn@@YAPADPADPBDI@Z
?register_file@@YAHPBDW4FILETYPE@@_N@Z
?close2@@YAHH@Z
?fileopen@@YAHHW4eOpenMode@@PAH@Z
?read2@@YAHHPAXI@Z
?SortRect@@YAXAAULRECT@@@Z
?LongRoundDiv@@YAJJJ@Z
?DoubleToLong@@YAJN@Z
?SortRectWithPoints@@YAXAAULRECT@@ABULPNT@@1@Z
?GetCornersOfRect@@YAXABULRECT@@PAULPNT@@@Z
?GetCenterOfRect@@YAXABULRECT@@AAULPNT@@@Z
?LongAdd@@YAJJJ@Z
?ExpandPointIntoRect@@YAXABULPNT@@AAULRECT@@JJJJ@Z
?ShortToLongRect@@YAXABURCT@@AAULRECT@@@Z
?ShortToLongPoints@@YAXPBUPNT@@PAULPNT@@H@Z
?ShortToDoubleRect@@YAXABURCT@@AAUDRECT@@@Z
?ShortToDoublePoints@@YAXPBUPNT@@PAUDPNT@@H@Z
?LongToShortRect@@YAXABULRECT@@AAURCT@@FF@Z
?LongToShortPoints@@YAXPBULPNT@@PAUPNT@@HPAHFF@Z
?unregister_file@@YAXH@Z
?DoubleToShortPoints@@YAXPBUDPNT@@PAUPNT@@HFF@Z
??1cResourceDLL@@UAE@XZ
??0cResourceDLL@@QAE@XZ
?StringToDouble@@YA_NPBDPANPAPAD@Z
?DoubleToString@@YAPADNPADH_NHW4PRINTF_FORMAT@@H@Z
?SetRect@@YAXAAULRECT@@JJJJ@Z
?LongToDoubleRect@@YAXABULRECT@@AAUDRECT@@@Z
?LongToDoublePoints@@YAXPBULPNT@@PAUDPNT@@H@Z
?DoubleToLongRect@@YAXABUDRECT@@AAULRECT@@JJ@Z
?DoubleToLongPoints@@YAXPBUDPNT@@PAULPNT@@HJJ@Z
?ExpandPointIntoRect@@YAXABUDPNT@@AAUDRECT@@NN@Z
?GetCenterOfRect@@YAXABUDRECT@@AAUDPNT@@@Z
?PointInRect@@YA_NABUDPNT@@ABUDRECT@@@Z
?ClipPointToRect@@YAXAAUDPNT@@ABUDRECT@@@Z
?SetRect@@YAXAAUDRECT@@NNNN@Z
?SortRect@@YAXAAUDRECT@@@Z
?GetCornersOfRect@@YAXABUDRECT@@PAUDPNT@@@Z
?InitRectForMerging@@YAXAAUDRECT@@@Z
?MergeRectWithPoint@@YAXAAUDRECT@@ABUDPNT@@@Z
?ffree@@YAXPAPAX@Z
?falloc_@@YA_NIPAPAX_N1@Z
?SetError@@YAXW4eErrorLevel@@PBDABU_GUID@@H11@Z
?lseek2@@YAJHJH@Z

msvcrt

sprintf
log10
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
_stricmp
_splitpath
_makepath
strtok
_CxxThrowException
vsprintf
atan2
exp
pow
_ftol
atan
tan
fabs
asin
sqrt
sin
cos
log
__CxxFrameHandler
_purecall

msvcp60

??Dstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??Ystd@@YAAAV?$complex@N@0@AAV10@ABV10@@Z
??Hstd@@YA?AV?$complex@N@0@ABV10@0@Z
??Kstd@@YA?AV?$complex@N@0@ABV10@0@Z
??Xstd@@YAAAV?$complex@N@0@AAV10@ABV10@@Z
??Dstd@@YA?AV?$complex@N@0@ABV10@0@Z

kernel32

LoadLibraryA
GetModuleHandleA
GetModuleFileNameA

Exports

Exports

?CalcAffineAlphas@@YA_NPAUAFFINE_INFO@@@Z
?CartesianDistance@@YANPBUDPNT@@0@Z
?ClipDivisor@@YANABN@Z
?ClipNativePoint@@YAXPAUDPNT@@@Z
?ClipNativeRect@@YAXPAUDRECT@@@Z
?ClipUserPoint@@YAXPAUDPNT@@@Z
?ClipUserRect@@YAXPAUDRECT@@@Z
?ComputeScalePrecision@@YAXPAUUNIT_INFO@@PBU1@@Z
?ConvertUnits@@YAXPANW4UNIT@@ABN1@Z
?CountCSYSDoubleParms@@YAHW4CSYS_TYPE@@@Z
?DegreesToRadians@@YAXPBUDPNT@@PAU1@@Z
?DoublesToCSYSPARMS@@YA_NPANHPAW4CSYS_TYPE@@PAUCSYS_PARMS@@PAUDRECT@@PA_NPAH@Z
?GetDatumFromDatumInfo@@YA_NPBUDATUM_INFO@@PAF@Z
?GetDatumInfo@@YAXFPAUDATUM_INFO@@@Z
?GetDefaultCSYSBounds@@YAXW4CSYS_TYPE@@PBUCSYS_PARMS@@PAUDRECT@@@Z
?GetEllipsoidInfo@@YAXW4ELLIPSOID@@PAUELLIPSOID_INFO@@@Z
?GetUnitAbbr@@YA_NW4UNIT@@PADF@Z
?GetUnitFullName@@YA_NW4UNIT@@PADF@Z
?GetUnitKeyword@@YA_NW4UNIT@@PADF@Z
?GetUnitSquareCounterpart@@YA?AW4UNIT@@W41@@Z
?GreatCircleDistance@@YANPBUDPNT@@0@Z
?InitCSYS@@YAPAVCSYS@@PBV1@@Z
?InitCSYSAsDefaultLL@@YAPAVCSYS@@XZ
?InitCSYSBoundsFromString@@YA_NAAUDRECT@@PBD@Z
?InitCSYSFromMetadata@@YAPAVCSYS@@PBVMetadata@@@Z
?InitCSYSMultiplierFromString@@YA_NAAUCSYS_MULTIPLIER@@PBD@Z
?InitCSYSParms@@YAXPAUCSYS_PARMS@@@Z
?InitCSYSParmsAsDefaultLL@@YAXPAUCSYS_PARMS@@@Z
?InitCSYSParmsFromMetadata@@YA_NPAW4CSYS_TYPE@@PAUCSYS_PARMS@@PAUDRECT@@PBVMetadata@@@Z
?InitCSYSParmsFromString@@YA_NAAW4CSYS_TYPE@@AAUCSYS_PARMS@@PBD@Z
?InitCSYSWithBounds@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@PBUDRECT@@@Z
?InitCSYSWithMultipliers@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@ABN222@Z
?InitCSYSWithParms@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@@Z
?InitCSYSWithRect@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@PBULRECT@@PBUDRECT@@ABN4@Z
?InitCSYSWithString@@YAPAVCSYS@@PBD0@Z
?InitCSYSWithZoom@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@PBULRECT@@PBUDPNT@@ABNW4UNIT@@44@Z
?InitCXFORM@@YAPAVCXFORM@@PBVCSYS@@0PAVShortClipRange@@@Z
?InitCXFORMWithRects@@YAPAVCXFORM@@PBULRECT@@0PAVShortClipRange@@@Z
?InitDatumInfo@@YAXPAUDATUM_INFO@@@Z
?InitNoOpCSYS@@YAPAVCSYS@@XZ
?InitNoOpCXFORM@@YAPAVCXFORM@@PAVShortClipRange@@@Z
?IsDistanceUnit@@YA_NW4UNIT@@@Z
?IsValidCSYSType@@YA_NW4CSYS_TYPE@@@Z
?IsValidDatum@@YA_NF@Z
?IsValidEllipsoid@@YA_NW4ELLIPSOID@@@Z
?IsValidUnit@@YA_NW4UNIT@@@Z
?LLConvertDatum@@YAXPBUDPNT@@PBUDATUM_INFO@@PBUELLIPSOID_INFO@@PAU1@12H@Z
?LLConvertDatumRect@@YAXPBUDRECT@@PBUDATUM_INFO@@PBUELLIPSOID_INFO@@PAU1@12@Z
?LongToUnit@@YA_NJPAW4UNIT@@@Z
?MatchUnitKeyword@@YA_NPBDPAW4UNIT@@@Z
?ModifyCXFORMForRaster@@YAPAVCXFORM@@PBV1@PBULRECT@@PAVShortClipRange@@@Z
?NAD27ToNAD83@NADCON@@SA_NPBUDPNT@@PAU2@@Z
?NAD83ToNAD27@NADCON@@SA_NPBUDPNT@@PAU2@@Z
?NADCONCloseRegion@NADCON@@CAXPAUNADCON_REGION@@@Z
?NADCONFindGrid@NADCON@@CA_NPBUDPNT@@PAU2@@Z
?NADCONInit@NADCON@@SA_NXZ
?NADCONOpenRegion@NADCON@@CA_NPAUNADCON_REGION@@@Z
?NADCONPointInRegion@NADCON@@CA_NPBUDPNT@@PBUNADCON_REGION@@@Z
?NADCONTerminate@NADCON@@SAXXZ
?RadiansToDegrees@@YAXPBUDPNT@@PAU1@@Z
?SameCSYSParms@@YA_NW4CSYS_TYPE@@PBUCSYS_PARMS@@01_N@Z
?SameDatumInfo@@YA_NPBUDATUM_INFO@@0@Z
?m_pNADCONInfo@NADCON@@0PAUNADCON_INFO@@A
?ptptdist@@YAJPBULPNT@@0@Z

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fb6b83baf80853ce50b7e7c574fdcb0b

Headers

File Characteristics

Imports

metadata

utility

msvcrt

msvcp60

kernel32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 106KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 12KB - Virtual size: 11KB

.text Size: 212KB - Virtual size: 212KB

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 212KB - Virtual size: 212KB