a03fa82dae43cf276bffe57a0b0349c9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a03fa82dae43cf276bffe57a0b0349c9_JaffaCakes118
Size

94KB
MD5

a03fa82dae43cf276bffe57a0b0349c9
SHA1

782f2e99f17e8736adf7ad0c8051666c813d83da
SHA256

d237c0ee17cc728663d53f6f3688a70eb6a9a6047aaca0d22992df1693362286
SHA512

57e5bfbd0c574c5f7bf41b7062bf90377d4615d4b475c79d2ff62a2405e6064b13982b06b2118bfaa6f8d10f52d23f9995c46f6be64eaa523de85d1c2cee5634
SSDEEP

1536:cF85Ba3LgaVHrFcfo55rpt0WRNViBzsMv2IwVaFqX36BFCWd/:zqgQLFcA55rpt0aNVwv2XJ6BsWd/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a03fa82dae43cf276bffe57a0b0349c9_JaffaCakes118

Files

a03fa82dae43cf276bffe57a0b0349c9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9c862a2747086ed03721c3c4ea849b10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\code_svn\xl_framework\win32_component\xlbugreport\minizip\Release\minizip.pdb

Imports

zlib1

deflateInit2_
deflateEnd
deflate
inflateInit2_
get_crc_table
inflateEnd
inflate
crc32

kernel32

SetFileTime
SetFilePointer
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
CloseHandle
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
CreateFileA
GetLastError
ReadFile
WriteFile

msvcr71

malloc
_mkdir
fopen
fread
fwrite
ftell
fseek
fclose
strcmp
free
_chdir
strlen
rand
srand
time
_errno
strcpy
exit
scanf
strcat
strncpy
__security_error_handler
_except_handler3
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit

Exports

Exports

mini_unzip_dll
unzClose
unzCloseCurrentFile
unzGetCurrentFileInfo
unzGetFilePos
unzGetGlobalComment
unzGetGlobalInfo
unzGetLocalExtrafield
unzGetOffset
unzGoToFilePos
unzGoToFirstFile
unzGoToNextFile
unzLocateFile
unzOpen
unzOpen2
unzOpenCurrentFile
unzOpenCurrentFile2
unzOpenCurrentFile3
unzOpenCurrentFilePassword
unzReadCurrentFile
unzSetOffset
unzStringFileNameCompare
unzeof
unztell
zipClose
zipCloseFileInZip
zipCloseFileInZipRaw
zipOpen
zipOpen2
zipOpenNewFileInZip
zipOpenNewFileInZip2
zipOpenNewFileInZip3
zipWriteInFileInZip

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c862a2747086ed03721c3c4ea849b10

Headers

File Characteristics

PDB Paths

Imports

zlib1

kernel32

msvcr71

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 72B

.reloc Size: 512B - Virtual size: 484B

.text Size: 76KB - Virtual size: 76KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 72B

.reloc
Size: 512B - Virtual size: 484B

.text
Size: 76KB - Virtual size: 76KB