89d04af81e59a6a915a6b81e296b8dbf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

89d04af81e59a6a915a6b81e296b8dbf_JaffaCakes118
Size

29KB
MD5

89d04af81e59a6a915a6b81e296b8dbf
SHA1

eb3c55763e174346dc6c8e72f305e3d22847eab8
SHA256

e6231f55ef75559ce295d0bf7874cdbcb76b9c8773fdeba75bb776d758ddcace
SHA512

d0ae768e2b6641e7790357ace916fc70ed4ab928baa91b1b0afd951312503eebdfe8d266ee02fe37acaec10665b3ac08d9bec2d2bda425bef263f979b16d753f
SSDEEP

384:Q2I/8MCvtBHKlijgFEn5yoDfLmgOHTjdE29gWVilY4cAQ76mUmV54gDb:Q2PMW0GgewiLmd9VilkAQ76mUAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89d04af81e59a6a915a6b81e296b8dbf_JaffaCakes118

Files

89d04af81e59a6a915a6b81e296b8dbf_JaffaCakes118
.dll windows:5 windows x86 arch:x86

eed7eeb1feabbf01e6443f9ec11772ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\TeamBuild\Lunascape\6.7.x_Gecko\Sources\Engines\Gecko_3.6\Firefox3.6\home\output\modules\libjar\zipwriter\src\zipwriter.pdb

Imports

xpcom_core

?NS_NewGenericModule2@@YAIPBUnsModuleInfo@@PAPAVnsIModule@@@Z
??0nsCOMArray_base@@IAE@XZ
?AppendObject@nsCOMArray_base@@IAEHPAVnsISupports@@@Z
?Equals@nsACString_internal@@QBIHABV1@@Z
?Assign@nsACString_internal@@QAIXABVnsCSubstringTuple@@@Z
?SetLength@nsACString_internal@@QAIXI@Z
??0nsACString_internal@@IAE@XZ
?HashString@@YAIABVnsACString_internal@@@Z
PL_DHashTableFinish
??1nsCOMArray_base@@IAE@XZ
?Clear@nsCOMArray_base@@IAEXXZ
?RemoveObjectAt@nsCOMArray_base@@IAEHH@Z
@PL_DHashTableOperate@12
?assign_from_qi@nsCOMPtr_base@@QAIXVnsQueryInterface@@ABUnsID@@@Z
PL_DHashMoveEntryStub
??0nsTArray_base@@IAE@XZ
??1nsTArray_base@@IAE@XZ
?EnsureCapacity@nsTArray_base@@IAEHII@Z
?ShiftData@nsTArray_base@@IAEXIIII@Z
PL_DHashTableEnumerate
?PL_DHashStubEnumRemove@@YA?AW4PLDHashOperator@@PAUPLDHashTable@@PAUPLDHashEntryHdr@@IPAX@Z
PL_DHashFreeTable
PL_DHashAllocTable
PL_DHashFinalizeStub
PL_DHashTableInit
?assign_from_qi_with_error@nsCOMPtr_base@@QAIXABVnsQueryInterfaceWithError@@ABUnsID@@@Z
??1nsACString_internal@@QAE@XZ
?Assign@nsACString_internal@@QAIXABV1@@Z
?Assign@nsACString_internal@@QAIXPBDI@Z
??0nsACString_internal@@QAE@PADII@Z
??0nsCreateInstanceByContractID@@QAE@PBDPAVnsISupports@@PAI@Z
??1nsCOMPtr_base@@QAE@XZ
?assign_with_AddRef@nsCOMPtr_base@@QAIXPAVnsISupports@@@Z
?assign_from_helper@nsCOMPtr_base@@QAIXABVnsCOMPtr_helper@@ABUnsID@@@Z
?NS_TableDrivenQI@@YIIPAXPBUQITableEntry@@ABUnsID@@PAPAX@Z

nspr4

PR_AtomicIncrement
PR_AtomicDecrement
PR_LocalTimeParameters
PR_NormalizeTime
PR_ImplodeTime
PR_ExplodeTime
PR_GMTParameters

plc4

PL_strcasecmp
PL_strncasecmp

mozz

MOZ_Z_crc32
MOZ_Z_deflate
MOZ_Z_deflateInit2_
MOZ_Z_deflateEnd

mozcrt19

_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??_V@YAXPAX@Z
??_U@YAPAXI@Z
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

NSGetModule

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eed7eeb1feabbf01e6443f9ec11772ef

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

xpcom_core

nspr4

plc4

mozz

mozcrt19

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 2KB - Virtual size: 1KB