331ba53e68e5db411aa86a0486350cfb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

331ba53e68e5db411aa86a0486350cfb_JaffaCakes118
Size

1.9MB
MD5

331ba53e68e5db411aa86a0486350cfb
SHA1

47ffcf5c61bf1ae15efaa1e8db5eccba5577e36a
SHA256

af535b2b85849cfc373fa25aadab92b52d86ce228fe434857b13a67451f86ee4
SHA512

d38e41691c6303b562bf81f1d29682de35e6132a0f410372df9de372dbab589d7bbaec82ecb2189b00d25689bfbb6eae8c26c2c8eaf01ab49443c49f1c2fb6c5
SSDEEP

12288:Wlu5zbHoRGSigffavEYUIHEog+kt6fhN4px+ZzxZAo2a0B/l36+eSFOdv6Rx9bL/:WlfRygfxYUrUfImvR0j3HeMOdvw9VMXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
331ba53e68e5db411aa86a0486350cfb_JaffaCakes118

Files

331ba53e68e5db411aa86a0486350cfb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b36d1c4a385c583cb504fe7d7d7e987c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glViewport
glTexSubImage2D
glTexParameteri
glTexImage2D
glStencilOp
glStencilMask
glStencilFunc
glReadPixels
glPixelStorei
glIsEnabled
glGetString
glGetIntegerv
glGetError
glGenTextures
glEnable
glDrawElements
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearColor
glBlendFunc
glBindTexture

ole32

CreateStreamOnHGlobal

crypt32

CryptBinaryToStringW
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertGetNameStringW
CryptHashPublicKeyInfo
CryptExportPKCS8
CryptExportPublicKeyInfo
CertVerifyTimeValidity
CertAddCertificateContextToStore
CertGetCertificateContextProperty
CertSetCertificateContextProperty
CertCreateCertificateContext
CertOpenStore
CryptEncodeObject
CryptEncodeObjectEx

kernel32

GetStdHandle
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
ExitProcess
SetFilePointerEx
SetStdHandle
GetFileType
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalUnlock
LocalAlloc
VirtualAlloc
GetEnvironmentStringsW
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ReleaseMutex
CloseHandle
MulDiv
FileTimeToLocalFileTime
lstrcmpiW
CreateMutexW
SetWaitableTimer
CreateFileMappingW
LoadLibraryExW
GetStartupInfoW
ExpandEnvironmentStringsW
FindResourceW
RemoveDirectoryW
CreateFileW
FindFirstFileW
IsValidLocale
GetSystemDefaultLangID
GetUserDefaultLCID
GetStringTypeW
EnumUILanguagesW
GetConsoleWindow
GetModuleHandleW
WriteConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
DecodePointer
HeapSize
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId

advapi32

RegEnumKeyExW
RegCreateKeyExW

user32

GetMonitorInfoW
WinHelpW
SetScrollInfo
FindWindowExW
GetWindowLongW
EqualRect
DrawFocusRect
GetCaretBlinkTime
EnableScrollBar
GetScrollPos
GetDCEx
SetForegroundWindow
RemoveMenu
AppendMenuW
GetMenuItemCount
EnableMenuItem
CreatePopupMenu
GetMenuState
LoadAcceleratorsW
RegisterClipboardFormatW
GetDialogBaseUnits
GetDlgItemTextW
IsWindow
PostThreadMessageW
UnregisterHotKey
EnableWindow

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 751KB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4tytgi
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.6135
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g440r
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b36d1c4a385c583cb504fe7d7d7e987c

Headers

File Characteristics

Imports

opengl32

ole32

crypt32

kernel32

advapi32

user32

Sections

.text Size: 85KB - Virtual size: 84KB

.data Size: 751KB - Virtual size: 7.5MB

.idata Size: 4KB - Virtual size: 4KB

.xdata Size: 1024B - Virtual size: 724B

.4tytgi Size: 280KB - Virtual size: 279KB

.6135 Size: 261KB - Virtual size: 260KB

.g440r Size: 465KB - Virtual size: 465KB

.rsrc Size: 100KB - Virtual size: 99KB

.text
Size: 85KB - Virtual size: 84KB

.data
Size: 751KB - Virtual size: 7.5MB

.idata
Size: 4KB - Virtual size: 4KB

.xdata
Size: 1024B - Virtual size: 724B

.4tytgi
Size: 280KB - Virtual size: 279KB

.6135
Size: 261KB - Virtual size: 260KB

.g440r
Size: 465KB - Virtual size: 465KB

.rsrc
Size: 100KB - Virtual size: 99KB