109083427ae50976157e8b585edab132_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

109083427ae50976157e8b585edab132_JaffaCakes118
Size

92KB
MD5

109083427ae50976157e8b585edab132
SHA1

8cfab89f35310bcf45b9330d305bc952adfd45aa
SHA256

a005e7d7422e02e720833b753cbfb936a3a8cf24336f32e74e93d244f6e79248
SHA512

5a13eb55b5f1739613c33878204ffe09a168bbba81a95a6eb2c27eef18f34c65b9a1ee4529dac560cbea15e6a5de32c799d02d0d2a282d07e5e3e4602d1d4066
SSDEEP

1536:rL/HYnKis5LC1iWhh2zRcq/7WYqzXdhuA2pyOSVMU:4nw5L2Keq/77qiTyOSeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
109083427ae50976157e8b585edab132_JaffaCakes118

Files

109083427ae50976157e8b585edab132_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7d3910a6781ed9f14eae021213f0c9d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\firefoxbuild\firefox-8.0\mozilla\fmfirefox-enUS\gfx\angle\src\libEGL\libEGL.pdb

Imports

d3d9

D3DPERF_EndEvent
D3DPERF_SetMarker
D3DPERF_GetStatus
D3DPERF_BeginEvent
Direct3DCreate9

libglesv2

ord146
ord158
ord145
ord144
ord147
ord148

kernel32

GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetCurrentThreadId
SetLastError
GetLastError
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
GetProcAddress
GetModuleHandleA
LocalAlloc
LocalFree
GetCurrentProcessId
GetVersion

user32

SetPropA
CallWindowProcA
GetClientRect
GetWindowThreadProcessId
InvalidateRect
GetPropA
SetWindowLongA
RemovePropA
IsWindow
CreateWindowExA
DestroyWindow

mozcrt19

vsprintf_s
fclose
vfprintf
fopen
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memmove_s
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memset
strcmp
free

mozcpp19

?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglCopyBuffers
eglCreateContext
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreateWindowSurface
eglDestroyContext
eglDestroySurface
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetProcAddress
eglInitialize
eglMakeCurrent
eglQueryAPI
eglQueryContext
eglQueryString
eglQuerySurface
eglReleaseTexImage
eglReleaseThread
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d3910a6781ed9f14eae021213f0c9d9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d9

libglesv2

kernel32

user32

mozcrt19

mozcpp19

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 16KB - Virtual size: 14KB