7464d188680ec985e55b7d67182379a6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7464d188680ec985e55b7d67182379a6_JaffaCakes118
Size

145KB
MD5

7464d188680ec985e55b7d67182379a6
SHA1

5f6614c9c3c5d8f941f8d82d89d8ad1b31ad6fe6
SHA256

a9b0dcd320daffea893863325d10a87bc891feace9cc12f25af2b3a315a3bf3a
SHA512

991ebdf3b3fa05876ed5185bc714b63f89a69241be159e3f938e9f59c422ad02a340bbec3bad4d39eba5c2a2c959538c67b4c7ef392e7900f1cb2fcc5642a6be
SSDEEP

3072:Ed1ANUdS/bJgxVqU42w4ESKA6T+Bkh/cU3:A1rwnyEt1hUU3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7464d188680ec985e55b7d67182379a6_JaffaCakes118

Files

7464d188680ec985e55b7d67182379a6_JaffaCakes118
.dll windows:5 windows x86 arch:x86

4d04a10f57ae33306f1add91cebddb8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Dev\Sony Ericsson\PC Companion\Core\TMonitor\Release\TMonitorAPI.pdb

Imports

kernel32

DisableThreadLibraryCalls
CreateEventW
CreateFileMappingW
GetLastError
MapViewOfFile
CloseHandle
UnmapViewOfFile
InterlockedExchange
SetEvent
InterlockedCompareExchange
InterlockedIncrement
WaitForSingleObject
InterlockedDecrement
GetLocalTime
GetCurrentProcessId
GetModuleFileNameW
lstrlenA
GetModuleFileNameA
GetFileAttributesExA
FileTimeToSystemTime
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
VirtualAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind

user32

WaitForInputIdle
GetActiveWindow
IsWindowVisible
SetWindowPos
wvsprintfA
wsprintfA

shell32

ShellExecuteExW

shlwapi

PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA

Exports

Exports

??0TMClient@@QAE@XZ
??0TMServer@@QAE@XZ
??1TMClient@@QAE@XZ
??1TMServer@@QAE@XZ
??4TMClient@@QAEAAV0@ABV0@@Z
??4TMServer@@QAEAAV0@ABV0@@Z
?GetBlock@TMClient@@QAEPAUBlock@TM@@XZ
?GetBlock@TMServer@@QAEPAUBlock@TM@@XZ
?PostBlock@TMClient@@QAEXPAUBlock@TM@@@Z
?ReturnBlock@TMServer@@QAEXPAUBlock@TM@@@Z
?tmDumpToDesktop@@YGPADXZ
?tmGetLevel@@YGHXZ
?tmGetPrefixFormat@@YGHPAUHINSTANCE__@@QADPBD@Z
?tmGetWindow@@YGPAUHWND__@@XZ
?tmIsRunning@@YG_NXZ
?tmPrint@@YGXPBD0HK@Z
?tmPrintHexa@@YGXPBXHPBDHK@Z
?tmPrintf@@YAXHKPBD0ZZ
?tmSetLevel@@YGXH@Z
?tmShowHideWindow@@YGXXZ
?tmShowWindow@@YGX_N@Z
?tmStartServer@@YG_NH_N@Z
?tmStopServer@@YGXXZ
?tmVPrintf@@YGXHKPBD0PAD@Z

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d04a10f57ae33306f1add91cebddb8b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 99KB - Virtual size: 98KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 99KB - Virtual size: 98KB

.reloc
Size: 3KB - Virtual size: 3KB