d53915d4e142d96051cfb60a330a7d97_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d53915d4e142d96051cfb60a330a7d97_JaffaCakes118
Size

31KB
MD5

d53915d4e142d96051cfb60a330a7d97
SHA1

33a201c47d3f2f6073dac79509515bb2428332df
SHA256

1bf382c855f8ea6fc2777ece1a99a5b03bf6b809dba7f0ba8a5fe22ddd0e413b
SHA512

939d9ab80a734d2d33872b3c7574e630beb712baa29cf35095c30210e7cd5ee6df75853c01f4405377c34b54609518d558b8157e7369d702cd34f35062578a2d
SSDEEP

768:T/cO3pO/SFE7mdJZBM09ZF+nXIbtRV0DfNHqxjdnGkj1:jcgpO/SFE7m3//D+n4btRV0rNHqxjdnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d53915d4e142d96051cfb60a330a7d97_JaffaCakes118

Files

d53915d4e142d96051cfb60a330a7d97_JaffaCakes118
.dll windows:4 windows x86 arch:x86

936fbbb430a3e6f345ce5cf98a15da7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

comphelp4msc

ord887
ord626
ord656
ord894
ord863
ord623
ord859
ord607
ord845
ord846
ord605

cppu3

uno_type_sequence_construct
uno_type_sequence_assign
uno_type_sequence_reference2One
uno_type_any_assign
uno_type_sequence_realloc
uno_type_assignData
cppu_unsatisfied_iquery_msg
typelib_static_type_init
uno_any_destruct
typelib_static_sequence_type_init
uno_type_any_construct
uno_type_destructData
typelib_static_type_getByTypeClass

cppuhelper3msc

?acquire@OWeakObject@cppu@@UAAXXZ
?release@OWeakObject@cppu@@UAAXXZ
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?ImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAX@Z
?ImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
??1OWeakObject@cppu@@MAE@XZ
??0OWeakObject@cppu@@QAE@XZ
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z

msvcr71

?terminate@@YAXXZ
__CxxFrameHandler
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??3@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??1type_info@@UAE@XZ
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_except_handler3

sal3

rtl_freeMemory
osl_releaseMutex
osl_acquireMutex
osl_getGlobalMutex
osl_createMutex
osl_destroyMutex
osl_closeFile
osl_setFilePos
osl_getFilePos
osl_readFile
osl_writeFile
rtl_allocateMemory
rtl_uString_newConcat
rtl_ustr_indexOfStr_WithLength
rtl_ustr_hashCode_WithLength
rtl_ustr_ascii_compareIgnoreAsciiCase_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_ustr_ascii_compare_WithLength
rtl_ustr_compare_WithLength
rtl_uString_assign
rtl_string2UString
rtl_uString_acquire
rtl_uString_new
rtl_uString_newFromAscii
rtl_uString_release
osl_incrementInterlockedCount
rtl_ustr_reverseCompare_WithLength

stlport_vc7145

??0_Loc_init@ios_base@_STL@@QAE@XZ
??1Init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ

tl680mi

ord1367
ord1306
ord1300

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

936fbbb430a3e6f345ce5cf98a15da7a

Headers

File Characteristics

Imports

kernel32

comphelp4msc

cppu3

cppuhelper3msc

msvcr71

sal3

stlport_vc7145

tl680mi

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: - Virtual size: 5KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: - Virtual size: 5KB