bb01edeb0eaca58b2b9e77d4271793e8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bb01edeb0eaca58b2b9e77d4271793e8_JaffaCakes118
Size

96KB
MD5

bb01edeb0eaca58b2b9e77d4271793e8
SHA1

3191effea5de0ee7793860fb8f0245cea5b04eea
SHA256

f00c384360c871b485d534f97eef1b0e38dc34f0f305d575d383784c0837781f
SHA512

ff3d921fe8dd26b5d0e316682adfe0c59e7409e41d9b42a119858b69f2cd929843f23fe4b7c7d988c12f9a241ba93b9594f0db9eca4e7282b500426ead5f067d
SSDEEP

3072:mwXp2XX6GYnnYVM9qodeACmS/cP1N5GngMq:jXq67YVMlda/mN5KXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb01edeb0eaca58b2b9e77d4271793e8_JaffaCakes118

Files

bb01edeb0eaca58b2b9e77d4271793e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31f7252844a23119b319afd0a02c7a90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\WC\DivXCommonRepository\DivXLicenseTools\bin\win32vs05\releasedynamic\dplreg.pdb

Imports

kernel32

LocalFree
DisconnectNamedPipe
FlushFileBuffers
LoadLibraryW
CreateMutexW
CreateThread
FreeLibrary
ExitProcess
CreateNamedPipeW
ReadFile
OpenMutexW
ReleaseMutex
GetLastError
CloseHandle
ConnectNamedPipe
GetProcAddress
WriteFile
GetVersionExW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
exit
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
_unlock
printf
_adjust_fdiv
__dllonexit
memset
__CxxFrameHandler3

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

31f7252844a23119b319afd0a02c7a90

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcp80

msvcr80

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 924B

.rsrc Size: 512B - Virtual size: 432B

.grdata Size: 80KB - Virtual size: 80KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 924B

.rsrc
Size: 512B - Virtual size: 432B

.grdata
Size: 80KB - Virtual size: 80KB