e153e8e6c8ec59541dd350a481c28344_JaffaCakes118

General

Target

e153e8e6c8ec59541dd350a481c28344_JaffaCakes118
Size

9KB
MD5

e153e8e6c8ec59541dd350a481c28344
SHA1

d3a9d91d84a68131cb9639a3fdde7bf7b5ae3965
SHA256

ced04f0d1ccde2115768424e2d91655d7b2a8d994fa140faf6b1d34dc3456936
SHA512

8586b2dca3a17f0052f6f10298b814ce8bc964f73a5f9a79d2c5d4ee11fbcb29c8677e1e80ad64cc585e5c0e93bb20e02e7a6f620f444f67317e3e2939f3d6e2
SSDEEP

192:AoLwatLhG7B6v9EkWrqIl3OCFwVMfE+npA5I:AktLhsqw3ODVj+pAy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e153e8e6c8ec59541dd350a481c28344_JaffaCakes118

Files

e153e8e6c8ec59541dd350a481c28344_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0369f5124bb2bcf9753bb1845defe79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-m-192-xr-w32-bld\build\obj-firefox\ipc\app\plugin-container.pdb

Imports

xul

XRE_SetRemoteExceptionHandler
XRE_StringToChildProcessType
XRE_InitChildProcess

mozcrt19

__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
exit
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
strcmp
??3@YAXPAX@Z
wcslen
??2@YAPAXI@Z
_encode_pointer

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateProcess

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0369f5124bb2bcf9753bb1845defe79

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

xul

mozcrt19

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 434B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 434B