0a65af9bbb5629fd85a0cc63e6b34f58_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0a65af9bbb5629fd85a0cc63e6b34f58_JaffaCakes118
Size

9KB
MD5

0a65af9bbb5629fd85a0cc63e6b34f58
SHA1

1e4462f2028f360f011c9c3d258cefc536ff7011
SHA256

ac3dc55271b2ea21d5b0fae2faa52cf9660beeed340d8728e026f8e3e71d6489
SHA512

fa499aa17f9546659030a2e5ceb54c2ee3bae0c2ae9e57ddde1713c6e162f1b69d053e2cb4d64584571a138ef8a1e6f9b1058d48535da3fca2146a36abdd86a3
SSDEEP

96:zHFyZ0M0In2EtV88X32q+sQQmpANSn50RgqXALJv8nJGZwI+N/uS57:88I22aKYnuknIXALJv8cZppS57

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a65af9bbb5629fd85a0cc63e6b34f58_JaffaCakes118

Files

0a65af9bbb5629fd85a0cc63e6b34f58_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1d0282fcfbd779cca76e57c18c0c4358

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

intl

libintl_dgettext

libgobject-2.0-0

g_object_get_data
g_object_set_data
g_signal_connect_data
g_signal_emit_by_name
g_signal_handler_disconnect
g_type_check_instance_cast

libgtk-win32-2.0-0

gtk_box_get_type
gtk_box_pack_end
gtk_button_new_with_mnemonic
gtk_text_buffer_get_char_count
gtk_text_view_get_buffer
gtk_text_view_get_type
gtk_widget_destroy
gtk_widget_set_sensitive
gtk_widget_show

libpurple

purple_conversation_get_ui_ops
purple_get_conversations
purple_plugin_register
purple_signal_connect

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memset

pidgin

pidgin_conversations_get_conv_ui_ops
pidgin_conversations_get_handle

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 84B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d0282fcfbd779cca76e57c18c0c4358

Headers

File Characteristics

Imports

kernel32

intl

libgobject-2.0-0

libgtk-win32-2.0-0

libpurple

msvcrt

pidgin

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 176B

.rdata Size: 1024B - Virtual size: 544B

.bss Size: - Virtual size: 208B

.edata Size: - Virtual size: 84B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 176B

.rdata
Size: 1024B - Virtual size: 544B

.bss
Size: - Virtual size: 208B

.edata
Size: - Virtual size: 84B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: - Virtual size: 4KB