1614246f14beaddca765acba81995e8a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1614246f14beaddca765acba81995e8a_JaffaCakes118
Size

17KB
MD5

1614246f14beaddca765acba81995e8a
SHA1

967dd03a4b83c5e67bdb37e121d4e144b0139010
SHA256

bcd966074b6de35d8cb17afae81fc4ebae68ecd72b8de9ecae40bb1099559b53
SHA512

6e9be326d6e7a50e04c39bee562ee9212e25e53442ac693c55e569795bfdc2b206f093f87768d446b1788ef415d8a63f8cfa69f3504b29864f9d05c0e57d094c
SSDEEP

384:2zwKATqFxKx2+pKQnLyD/pQCcRup3OAJvzWmYtPFE:2zwKH45pKMWDRQ1o3OVE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1614246f14beaddca765acba81995e8a_JaffaCakes118

Files

1614246f14beaddca765acba81995e8a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

83c8c926c9fb47e0447b67b97c96b9d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

cygsvn_fs_base-1-0

svn_fs_base__init

cygsvn_fs_fs-1-0

svn_fs_fs__init

cygsvn_subr-1-0

svn_checksum_parse_hex
svn_error__locate
svn_error__malfunction
svn_error_clear
svn_error_create
svn_error_createf
svn_io_dir_make_sgid
svn_io_file_close
svn_io_file_open
svn_io_file_write_full
svn_io_read_length_line
svn_path_is_backpath_present
svn_path_is_dotpath_present
svn_path_join
svn_pool_create_ex
svn_stream_checksummed2
svn_stream_close
svn_stringbuf_appendcstr
svn_utf__cstring_is_valid
svn_uuid_generate
svn_ver_equal
svn_xml_is_xml_safe

cygapr-1-0

apr_hash_first
apr_hash_get
apr_hash_make
apr_hash_next
apr_hash_set
apr_hash_this
apr_palloc
apr_pool_cleanup_null
apr_pool_cleanup_register
apr_pool_clear
apr_pool_destroy
apr_psprintf
apr_pstrdup

cygaprutil-1-0

apr_uuid_parse

cygwin1

_impure_ptr
abort
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
free
malloc
realloc
strcmp
strlen

cygintl-8

libintl_dgettext

kernel32

GetModuleHandleA
GetProcAddress

cygsvn_fs_util-1-0

svn_fs__path_change2_create

Exports

Exports

svn_fs__access_get_lock_tokens
svn_fs_abort_txn
svn_fs_access_add_lock_token
svn_fs_access_add_lock_token2
svn_fs_access_get_username
svn_fs_apply_text
svn_fs_apply_textdelta
svn_fs_begin_txn
svn_fs_begin_txn2
svn_fs_berkeley_logfiles
svn_fs_berkeley_path
svn_fs_berkeley_recover
svn_fs_change_node_prop
svn_fs_change_rev_prop
svn_fs_change_txn_prop
svn_fs_change_txn_props
svn_fs_check_path
svn_fs_check_related
svn_fs_close_root
svn_fs_closest_copy
svn_fs_commit_txn
svn_fs_compare_ids
svn_fs_contents_changed
svn_fs_copied_from
svn_fs_copy
svn_fs_create
svn_fs_create_access
svn_fs_create_berkeley
svn_fs_delete
svn_fs_delete_berkeley
svn_fs_delete_fs
svn_fs_deltify_revision
svn_fs_dir_entries
svn_fs_file_checksum
svn_fs_file_contents
svn_fs_file_length
svn_fs_file_md5_checksum
svn_fs_generate_lock_token
svn_fs_get_access
svn_fs_get_file_delta_stream
svn_fs_get_lock
svn_fs_get_locks
svn_fs_get_mergeinfo
svn_fs_get_uuid
svn_fs_history_location
svn_fs_history_prev
svn_fs_hotcopy
svn_fs_hotcopy_berkeley
svn_fs_initialize
svn_fs_is_dir
svn_fs_is_file
svn_fs_is_revision_root
svn_fs_is_txn_root
svn_fs_list_transactions
svn_fs_lock
svn_fs_make_dir
svn_fs_make_file
svn_fs_merge
svn_fs_new
svn_fs_node_created_path
svn_fs_node_created_rev
svn_fs_node_history
svn_fs_node_id
svn_fs_node_origin_rev
svn_fs_node_prop
svn_fs_node_proplist
svn_fs_open
svn_fs_open_berkeley
svn_fs_open_txn
svn_fs_pack
svn_fs_parse_id
svn_fs_path
svn_fs_path_change2_create
svn_fs_paths_changed
svn_fs_paths_changed2
svn_fs_print_modules
svn_fs_props_changed
svn_fs_purge_txn
svn_fs_recover
svn_fs_revision_link
svn_fs_revision_prop
svn_fs_revision_proplist
svn_fs_revision_root
svn_fs_revision_root_revision
svn_fs_root_fs
svn_fs_set_access
svn_fs_set_berkeley_errcall
svn_fs_set_uuid
svn_fs_set_warning_func
svn_fs_txn_base_revision
svn_fs_txn_name
svn_fs_txn_prop
svn_fs_txn_proplist
svn_fs_txn_root
svn_fs_txn_root_base_revision
svn_fs_txn_root_name
svn_fs_type
svn_fs_unlock
svn_fs_unparse_id
svn_fs_upgrade
svn_fs_version
svn_fs_youngest_rev

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 336B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83c8c926c9fb47e0447b67b97c96b9d1

Headers

File Characteristics

Imports

cygsvn_fs_base-1-0

cygsvn_fs_fs-1-0

cygsvn_subr-1-0

cygapr-1-0

cygaprutil-1-0

cygwin1

cygintl-8

kernel32

cygsvn_fs_util-1-0

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 864B

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 336B

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 436B

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 864B

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 336B

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 436B