01aa8f9282d12692a24ffd7d0dbb82cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01aa8f9282d12692a24ffd7d0dbb82cd_JaffaCakes118
Size

283KB
MD5

01aa8f9282d12692a24ffd7d0dbb82cd
SHA1

290516f14eefff17ccbfaf756ba5c725f6adbccb
SHA256

c5cc8b958a2a2943561f1d9800b0d86ea7d0b7cc40ea78557257d551abf3f650
SHA512

15e1da68743ae086795d84c5a16c23dbafbf222e26ae504c2b0d86d5bdc9c20c1f61b7bcf789718b473e55907b0d969402d8169d9c3ae661e0f6471df4bdd354
SSDEEP

6144:C3zddR12ef7InodZ9myJjqIaVb3hJFa4s9+FER2udN1oZHdy+RVaVSBSSX2Ri:Wzd312ezsEZ9TaVbRJFK1oZYwVbGRi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01aa8f9282d12692a24ffd7d0dbb82cd_JaffaCakes118

Files

01aa8f9282d12692a24ffd7d0dbb82cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ead5834fca267ca83a0263824064a63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

opencl

clBuildProgram
clCreateBuffer
clCreateCommandQueue
clCreateContextFromType
clCreateKernel
clCreateProgramWithBinary
clCreateProgramWithSource
clEnqueueNDRangeKernel
clEnqueueReadBuffer
clEnqueueWriteBuffer
clFinish
clGetDeviceIDs
clGetDeviceInfo
clGetPlatformIDs
clGetPlatformInfo
clGetProgramBuildInfo
clGetProgramInfo
clReleaseCommandQueue
clReleaseContext
clReleaseKernel
clReleaseProgram
clSetKernelArg

libcurl-4

curl_easy_cleanup
curl_easy_init
curl_easy_perform
curl_easy_reset
curl_easy_setopt
curl_global_cleanup
curl_global_init
curl_slist_append
curl_slist_free_all

kernel32

CreateFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetConsoleScreenBufferInfo
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetCommConfig
SetCommTimeouts
SetConsoleCursorPosition
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_access
_close
_execv
_fdopen
_isatty
_read
_stat
_strdup
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_filbuf
_iob
_isctype
_onexit
_open_osfhandle
_pctype
_setmode
_stricmp
_strnicmp
_winmajor
abort
atexit
atof
atoi
calloc
exit
fclose
fflush
fgetc
fopen
fputc
fread
free
fseek
ftell
fwrite
getenv
localeconv
localtime
log10
malloc
mbstowcs
memchr
memcpy
memmove
memset
perror
qsort
raise
realloc
setlocale
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncat
strncmp
strncpy
strstr
strtok
strtol
time
tolower
vfprintf
wcslen
wcstombs

libpdcurses

LINES
cbreak
delwin
echo
endwin
getmaxx
getmaxy
halfdelay
idlok
immedok
initscr
leaveok
mvwhline
mvwin
mvwprintw
newwin
nocbreak
noecho
scrollok
stdscr
touchwin
vw_printw
wattroff
wattron
wclear
wclrtoeol
wgetch
wgetnstr
wmove
wprintw
wrefresh
wresize

pthreadgc2

pthread_cancel
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_create
pthread_detach
pthread_join
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_self
pthread_setcanceltype
ptw32_pop_cleanup
ptw32_push_cleanup

libusb-1.0

libusb_bulk_transfer@24
libusb_claim_interface@8
libusb_close@4
libusb_control_transfer@32
libusb_exit@4
libusb_free_device_list@8
libusb_get_bus_number@4
libusb_get_device_address@4
libusb_get_device_descriptor@8
libusb_get_device_list@8
libusb_get_string_descriptor_ascii@16
libusb_init@4
libusb_open@8
libusb_release_interface@8

ws2_32

WSAGetLastError
WSAIoctl
accept
bind
closesocket
htons
inet_addr
inet_ntoa
listen
recv
send
shutdown
socket

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ead5834fca267ca83a0263824064a63

Headers

File Characteristics

Imports

opencl

libcurl-4

kernel32

msvcrt

libpdcurses

pthreadgc2

libusb-1.0

ws2_32

Sections

.text Size: 224KB - Virtual size: 223KB

.data Size: 5KB - Virtual size: 4KB

.rdata Size: 45KB - Virtual size: 44KB

.eh_fram Size: 512B - Virtual size: 288B

.bss Size: - Virtual size: 18KB

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.text
Size: 224KB - Virtual size: 223KB

.data
Size: 5KB - Virtual size: 4KB

.rdata
Size: 45KB - Virtual size: 44KB

.eh_fram
Size: 512B - Virtual size: 288B

.bss
Size: - Virtual size: 18KB

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B