a0eb675e4cec221e4859ced2a2cc1bd8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a0eb675e4cec221e4859ced2a2cc1bd8_JaffaCakes118
Size

226KB
MD5

a0eb675e4cec221e4859ced2a2cc1bd8
SHA1

473aa51abb8380c305a27eb74f8e3875b7666067
SHA256

a60f9e41c060ec21aa3d7e0b7da6026811d4d429bcd05b77ba3a0a9782b2e9d0
SHA512

b0a81e852e67c6e4608c41ed4614f61ed192546615f8462908f2aa82d2b52a194bcd0414ef24035a9c2f353b678e6f594a3eafdd9fe6fcb6f5c2f825cb111be1
SSDEEP

6144:Nkce6ELlYE7/hAZUvPucYE05eLCjEMoDyuITG:NPJ8hiU+HwMoD9WG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0eb675e4cec221e4859ced2a2cc1bd8_JaffaCakes118

Files

a0eb675e4cec221e4859ced2a2cc1bd8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2c9358a15422a6ac0884cc17961e6b41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

h:\projects\mozilla\mozilla\RELEASE\extensions\pref\autoconfig\src\autoconfig.pdb

Imports

js3250

JS_BeginRequest
JS_InitStandardClasses
JS_SetErrorReporter
JS_EvaluateScript
JS_NewContext
JS_PropertyStub
JS_MaybeGC
JS_ConvertStub
JS_ResolveStub
JS_EnumerateStub
JS_FinalizeStub
JS_EndRequest
JS_DestroyContext
JS_NewObject

xpcom_core

??0nsCreateInstanceByCID@@QAE@ABUnsID@@PAVnsISupports@@PAI@Z
?assign_from_gs_cid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByCIDWithError@@ABUnsID@@@Z
?assign_from_qi@nsCOMPtr_base@@QAEXVnsQueryInterface@@ABUnsID@@@Z
?CopyUTF16toUTF8@@YAXABVnsAString_internal@@AAVnsACString_internal@@@Z
?GetWeakReference@nsSupportsWeakReference@@UAGIPAPAVnsIWeakReference@@@Z
?Assign@nsACString_internal@@QAEXABV1@@Z
?Assign@nsACString_internal@@QAEXABVnsCSubstringTuple@@@Z
??1nsSupportsWeakReference@@IAE@XZ
?RFindChar@nsCString@@QBEHGHH@Z
??0nsSupportsWeakReference@@QAE@XZ
?CopyUCS2toASCII@@YAXABVnsAString_internal@@AAVnsACString_internal@@@Z
?NS_NewGenericModule2@@YAIPBUnsModuleInfo@@PAPAVnsIModule@@@Z
?ToNewCString@@YAPADABVnsACString_internal@@@Z
?FindChar@nsCSubstring@@QBEHDI@Z
?Assign@nsCSubstring@@QAEXPBDI@Z
?Replace@nsCSubstring@@QAEXIIPBDI@Z
?SetLength@nsCSubstring@@QAEXI@Z
??0nsCreateInstanceByContractID@@QAE@PBDPAVnsISupports@@PAI@Z
?strcmp@nsCRT@@SAHPBD0@Z
??1nsACString_internal@@QAE@XZ
?sCanonicalVTable@nsObsoleteAString@@2PBXB
?sCanonicalVTable@nsObsoleteACString@@2PBXB
?sEmptyBuffer@?$nsCharTraits@D@@2PBDB
??1nsAString_internal@@QAE@XZ
??1nsCOMPtr_base@@QAE@XZ
?assign_from_gs_contractid@nsCOMPtr_base@@QAEXVnsGetServiceByContractID@@ABUnsID@@@Z
?assign_from_gs_contractid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByContractIDWithError@@ABUnsID@@@Z
?assign_from_helper@nsCOMPtr_base@@QAEXABVnsCOMPtr_helper@@ABUnsID@@@Z
?Adopt@nsSubstring@@QAEXPAGI@Z
?Assign@nsCSubstring@@QAEXABVnsCSubstringTuple@@@Z
?Adopt@nsCSubstring@@QAEXPADI@Z
?sEmptyBuffer@?$nsCharTraits@G@@2PBGB
?Init@nsPromiseFlatCString@@AAEXABVnsACString_internal@@@Z

nspr4

PR_NewLogModule
PR_AtomicIncrement
PR_Malloc
PR_Free
PR_AtomicDecrement

plc4

PL_strlen
PL_strncmp

msvcp71

?_Nomemory@std@@YAXXZ

msvcr71

strlen
??3@YAXPAX@Z
malloc
_callnewh
free
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

NSGetModule

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 207KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c9358a15422a6ac0884cc17961e6b41

Headers

File Characteristics

PDB Paths

Imports

js3250

xpcom_core

nspr4

plc4

msvcp71

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 140B

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 207KB - Virtual size: 208KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 140B

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 207KB - Virtual size: 208KB