dcd89c090440ce2944c0670f178a6a98_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dcd89c090440ce2944c0670f178a6a98_JaffaCakes118
Size

69KB
MD5

dcd89c090440ce2944c0670f178a6a98
SHA1

18d08ffd7c85e4a48dd41c7ff3eec7332e5f5146
SHA256

ca040702dc7e1a7323056332b2dec894e85036142694cdbfe7948cfa71afd57f
SHA512

85f6ed9a7218687db8584ffb116b263b6995cf57bbd610a48c7fe912cb970565eeb8d1fc155cfb4c4274c71dc6d06279a5cdcfb898fea9b9298ee18647dc04f9
SSDEEP

768:50GW5nwSybk/QZzsMuKSpcNmFAGas38sODTDM2J/1WBpz0qJYBB+/Hftf7JRu1D:XYzQuTPmm7Dsd0k/1WBpz0GAef78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcd89c090440ce2944c0670f178a6a98_JaffaCakes118

Files

dcd89c090440ce2944c0670f178a6a98_JaffaCakes118
.dll windows:5 windows x86 arch:x86

735771cabd93053f96ab8ad79a68032b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\P4\dev\main\chief\CSC\Release\CSC.pdb

Imports

kernel32

GetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

PostMessageW
LoadCursorW
SetCursor
CallNextHookEx
UnhookWindowsHookEx
MessageBoxA
SetWindowsHookExW
ReleaseDC
DrawFocusRect
GetWindowDC

msvcp90

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?width@ios_base@std@@QAEHH@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

msvcr90

free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_malloc_crt
_encode_pointer
__CxxFrameHandler3

Exports

Exports

?clearMyHook@@YAHPAUHWND__@@@Z
?getCurrentRect@@YA?AUtagRECT@@XZ
?setMyHook@@YAHPAUHWND__@@@Z

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

735771cabd93053f96ab8ad79a68032b

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 876B

.SHARED Size: 512B - Virtual size: 36B

.rsrc Size: 57KB - Virtual size: 56KB

.reloc Size: 1024B - Virtual size: 710B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 876B

.SHARED
Size: 512B - Virtual size: 36B

.rsrc
Size: 57KB - Virtual size: 56KB

.reloc
Size: 1024B - Virtual size: 710B