e08f1159a3bd673363aebfd881afddbc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e08f1159a3bd673363aebfd881afddbc_JaffaCakes118
Size

164KB
MD5

e08f1159a3bd673363aebfd881afddbc
SHA1

c0eb9ab7ce13bd318f9f9a92ead4ef735a6a1e4d
SHA256

5d5394b00052869db9d07830aa4f9fa341a69e86a189c09979eb5863d5ff3262
SHA512

7db289cd3a102089e7cb978cc1088cf898d9b645f50a13e3f71ad1d5bd6554c853b80cca932f710812fd62d1de400f12b076da308fff4607f7de4211e6ee6349
SSDEEP

3072:pxuUxiIRJTnOLhvX7OcPnUlu5BAnViPUXAXmotd+r:px7x7yvCcPnUl8B0VPT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e08f1159a3bd673363aebfd881afddbc_JaffaCakes118

Files

e08f1159a3bd673363aebfd881afddbc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ea0a68bf8566996f697f81450c331200

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\src\rjwmapln\rjwmapln.pdb

Imports

ole32

IIDFromString
StringFromIID
CoTaskMemFree
CoInitialize

kernel32

LoadLibraryA
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
GetSystemDirectoryA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
GetProcAddress
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
MultiByteToWideChar
SetErrorMode
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess

user32

CharNextA
GetSystemMetrics
GetDC
ReleaseDC

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

gdi32

GetTextCharset

wmvcore

WMCreateEditor

msvcr71

__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
__security_error_handler
_mbctype
_stricmp
_wcsicmp
_putenv
sprintf
memset
strrchr
??3@YAXPAX@Z
_purecall
printf
??2@YAPAXI@Z
strncpy
strchr
wcslen
_except_handler3
free
wcsstr
swprintf
wcscmp
wcstoul
_ui64tow
_wtoi
wcschr
_itow
_i64tow
_wtoi64
wcsncpy
wcscpy
wcscat
malloc
realloc

Exports

Exports

MPACreateComponentInstance

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ea0a68bf8566996f697f81450c331200

Headers

File Characteristics

PDB Paths

Imports

ole32

kernel32

user32

advapi32

version

gdi32

wmvcore

msvcr71

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 100KB - Virtual size: 100KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 100KB - Virtual size: 100KB