490a33bcaac3aba28503ad8b864cf862_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

490a33bcaac3aba28503ad8b864cf862_JaffaCakes118
Size

5.0MB
MD5

490a33bcaac3aba28503ad8b864cf862
SHA1

b7e17c54e8406a54fa6905e74e934487e73db84c
SHA256

750f4c3fabf78d5e66695480b55db338992618fb9ab9aa9efa232068bbbb6531
SHA512

5e773c93cc9ec51d4c151c17ece62d8d082d3872f8092239744f8bf6ad86cd2d9212d47262b20bff92c5b06ad012e5016d3f9d18c5febf6a8ce6183f03bf1a9d
SSDEEP

49152:pZbC7LbhxD18MpVZTT9BymtLtq5FjVOIdbw8ljP1LD2c1Dc0ySVPMK9x6dDRPE8q:piVZTumtBq7LCoVymj9x8DawIc90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490a33bcaac3aba28503ad8b864cf862_JaffaCakes118

Files

490a33bcaac3aba28503ad8b864cf862_JaffaCakes118
.exe windows:6 windows x86 arch:x86

16f3eec1cd8597bfae34c8d79621cd9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\OTC\OT KLIENT\OTClient jego paczka co cudownie dziala\ot client JEGO\otclient.pdb

Imports

glew32

__glewUniform1f
__glewBindBuffer
__glewBufferData
__glewFramebufferTexture2D
__glewCheckFramebufferStatus
__glewDeleteFramebuffers
__glewGenFramebuffers
__glewBindFramebuffer
__GLEW_VERSION_2_0
__GLEW_VERSION_1_4
_glewGetErrorString@4
__GLEW_ARB_vertex_program
__GLEW_ARB_vertex_shader
__glewDisableVertexAttribArray
__glewVertexAttribPointer
__glewEnableVertexAttribArray
__glewBlendEquation
__glewBlendFuncSeparate
__glewLinkProgram
__glewDeleteProgram
__glewAttachShader
__glewGetUniformLocation
__glewGetProgramiv
__glewCreateProgram
__glewBindAttribLocation
__glewUseProgram
__glewDeleteShader
__glewShaderSource
__glewGetShaderInfoLog
__glewCreateShader
__glewCompileShader
__glewGetShaderiv
__glewUniform4f
__glewActiveTexture
__glewUniform1i
__glewUniformMatrix3fv
__glewDeleteBuffers
__glewGenBuffers
__GLEW_ARB_texture_non_power_of_two
_glewInit@0
__glewBindFramebufferEXT
__glewGenerateMipmap
__glewCheckFramebufferStatusEXT
__glewDeleteFramebuffersEXT
__GLEW_VERSION_1_1
__glewGenerateMipmapEXT
__glewFramebufferTexture2DEXT
__GLEW_ARB_framebuffer_object
__GLEW_ARB_fragment_shader
__GLEW_EXT_framebuffer_object
__GLEW_ARB_vertex_buffer_object
__glewGenFramebuffersEXT
__GLEW_VERSION_1_2
__glewUniform2f

zlib

compress2
compressBound
inflateInit_
inflateEnd
inflate
deflateInit2_
deflateReset
inflateReset
deflateEnd
crc32
deflate
uncompress

openal32

alSourceUnqueueBuffers
alSourcef
alSourceQueueBuffers
alBufferData
alDeleteBuffers
alGetError
alGetString
alGenBuffers
alcGetError
alcMakeContextCurrent
alcDestroyContext
alcGetString
alcOpenDevice
alcCreateContext
alcCloseDevice
alcProcessContext
alDeleteSources
alSource3f
alGenSources
alSourcePlay
alGetSourcei
alSourceStop
alSourcei

opengl32

wglGetProcAddress
wglCreateContext
glColor4f
glVertex2f
glDrawArrays
glTexCoordPointer
glBegin
glMatrixMode
glDisableClientState
glTexCoord2f
glEnd
glLoadMatrixf
glVertexPointer
glEnableClientState
wglDeleteContext
glColorMask
glBlendFunc
glScissor
wglMakeCurrent
glClear
glViewport
glTexImage2D
glDeleteTextures
glTexParameteri
glCopyTexSubImage2D
glGenTextures
glBindTexture
glGetIntegerv
glGetString
glDisable
glEnable
glClearColor

dbghelp

UnDecorateSymbolName
StackWalk
SymInitialize
SymGetModuleBase
SymFunctionTableAccess
SymCleanup
SymGetSymFromAddr

kernel32

GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
InitializeSListHead
AreFileApisANSI
DeviceIoControl
SetThreadAffinityMask
FindNextFileW
FindFirstFileW
CreateFileW
LocalFree
SystemTimeToFileTime
GetLogicalProcessorInformation
OpenEventA
WaitForMultipleObjectsEx
ResetEvent
GetProcessHeap
HeapFree
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
GetVersionExW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RaiseException
ReleaseMutex
VirtualProtect
GetModuleHandleExA
LoadLibraryExA
CreateThread
InitializeCriticalSection
VirtualQuery
VirtualFree
VirtualAlloc
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetVolumeInformationA
FormatMessageA
GetVersionExA
CreateMutexA
SetErrorMode
SetFilePointer
RemoveDirectoryA
ReadFile
GetFileTime
GetFileSize
GetFileAttributesA
GetDriveTypeA
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
CreateDirectoryA
FlushConsoleInputBuffer
GlobalMemoryStatus
LoadLibraryA
FreeLibrary
GetTickCount
WriteFile
CompareStringW
GetModuleHandleW
DecodePointer
EncodePointer
QueryPerformanceFrequency
GetExitCodeThread
TryEnterCriticalSection
CreateEventA
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
GetLastError
SetEvent
TlsAlloc
CloseHandle
TlsFree
SetWaitableTimer
GetSystemTimeAsFileTime
TlsSetValue
VerifyVersionInfoA
SetLastError
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
WaitForSingleObject
CreateEventW
Sleep
TerminateThread
QueueUserAPC
CreateWaitableTimerA
DeleteCriticalSection
VerSetConditionMask
SleepEx
TlsGetValue
CreateIoCompletionPort
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentThread
GlobalFree
SetUnhandledExceptionFilter
GetCommandLineW
TerminateProcess
GetProcessId
GetTempPathW
GetFileAttributesW
OpenProcess
GetFileAttributesExW
DeleteFileW
GetSystemInfo
GetCurrentDirectoryW
GetCurrentProcessId
GlobalMemoryStatusEx
CopyFileW
GlobalAlloc
GlobalLock
GlobalUnlock
ReleaseSemaphore
DuplicateHandle
WaitForSingleObjectEx
CreateSemaphoreA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
QueryPerformanceCounter
GetStdHandle
GetFileType

user32

SetWindowLongA
OpenClipboard
ShowWindow
DestroyCursor
GetWindowPlacement
SetWindowTextW
MessageBoxW
SetWindowPos
GetDC
DestroyWindow
LoadCursorA
DispatchMessageA
GetKeyState
AdjustWindowRectEx
GetProcessWindowStation
GetUserObjectInformationW
CreateIconIndirect
CloseClipboard
EmptyClipboard
GetWindowLongA
SetWindowPlacement
CreateCursor
MoveWindow
RegisterClassA
DefWindowProcA
CreateWindowExA
TranslateMessage
GetClipboardData
SendMessageA
SetCapture
SetClipboardData
SetCursor
LoadIconA
GetClientRect
PeekMessageA
UnregisterClassA
ShowCursor
ReleaseDC
GetSystemMetrics
MessageBoxA
FindWindowA

shell32

CommandLineToArgvW
ShellExecuteW

gdi32

CreateCompatibleBitmap
GetStockObject
ChoosePixelFormat
DeleteObject
SwapBuffers
SetPixelFormat
CreateBitmap

advapi32

OpenProcessToken
RegisterEventSourceA
DeregisterEventSource
CryptAcquireContextW
GetUserNameA
CryptGenRandom
CryptReleaseContext
RegQueryValueExA
RegOpenKeyExA
ReportEventA

ws2_32

WSAStringToAddressW
WSAAddressToStringW
ntohl
htons
__WSAFDIsSet
accept
bind
WSAIoctl
closesocket
WSASend
select
shutdown
listen
WSASetLastError
WSASocketW
getaddrinfo
getpeername
getsockname
connect
WSARecv
htonl
freeaddrinfo
ioctlsocket
setsockopt
WSAGetLastError
WSACleanup
WSAStartup
getsockopt

mswsock

GetAcceptExSockaddrs
AcceptEx

vcruntime140

__RTDynamicCast
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
memcmp
_CxxThrowException
__uncaught_exception
__CxxFrameHandler3
strrchr
wcsstr
memset
memcpy
strchr
strstr
__RTtypeid
__AdjustPointer
__std_type_info_compare
__std_terminate
memchr
__std_type_info_name
_purecall
__std_exception_copy
memmove
__std_exception_destroy
__current_exception
__processing_throw

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fseek
ferror
fputs
__stdio_common_vsprintf
fopen_s
fclose
__p__fmode
__p__commode
fgetc
__stdio_common_vsprintf_s
__stdio_common_vsscanf
_setmode
fopen
fread
tmpnam
_fileno
fgets
feof
_get_stream_buffer_pointers
_wfopen
_fseeki64
__stdio_common_vfscanf
fsetpos
ungetc
tmpfile
setvbuf
_popen
_fsopen
_pclose
_set_fmode
ftell
getc
fputc
_ftelli64
fflush
__acrt_iob_func
fwrite
fgetpos
clearerr
putchar

api-ms-win-crt-heap-l1-1-0

realloc
malloc
_malloc_base
_callnewh
_set_new_mode
_realloc_base
calloc
free
_free_base
_calloc_base

api-ms-win-crt-convert-l1-1-0

atol
atoi
strtoul
strtof
strtod
atof

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_crt_atexit
signal
_invalid_parameter_noinfo
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_initterm_e
raise
_initterm
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
strerror
_seh_filter_exe
_controlfp_s
exit
terminate
_errno
_wassert
_beginthreadex
system
abort
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-string-l1-1-0

wcsnlen
strncpy
isdigit
isxdigit
strcmp
__strncnt
islower
isspace
_wcsdup
isalpha
strncmp
toupper
strcspn
strlen
_strnicmp
tolower
isupper
_stricmp
isalnum

api-ms-win-crt-locale-l1-1-0

setlocale
_lock_locales
_configthreadlocale
___mb_cur_max_func
___lc_codepage_func
localeconv
___lc_locale_name_func
__pctype_func
___lc_collate_cp_func
_unlock_locales

api-ms-win-crt-math-l1-1-0

_libm_sse2_acos_precise
ceil
log2f
_libm_sse2_atan_precise
floor
_libm_sse2_tan_precise
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log10_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_CIatan2
__setusermatherr
_except1
_CIexp
_libm_sse2_log_precise
fmod
atan2
tanh
_CIsqrt
cosh
frexp
ldexp
sinh
atan
acos
asin
tan
cos
sin
exp
log10
log
pow
_CIfmod

api-ms-win-crt-filesystem-l1-1-0

remove
_lock_file
rename
_unlock_file

api-ms-win-crt-time-l1-1-0

_Strftime
_Gettnames
_Wcsftime
_W_Gettnames
_W_Getmonths
_W_Getdays
_Getmonths
_Getdays
_mktime64
_time64
_gmtime64
_difftime64
strftime
_localtime64
clock

api-ms-win-crt-utility-l1-1-0

rand
qsort
bsearch
rand_s

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

Exports

Exports

PHYSFS_addToSearchPath
PHYSFS_close
PHYSFS_deinit
PHYSFS_delete
PHYSFS_enumerateFiles
PHYSFS_enumerateFilesCallback
PHYSFS_eof
PHYSFS_exists
PHYSFS_fileLength
PHYSFS_flush
PHYSFS_freeList
PHYSFS_getBaseDir
PHYSFS_getCdRomDirs
PHYSFS_getCdRomDirsCallback
PHYSFS_getDirSeparator
PHYSFS_getLastError
PHYSFS_getLastModTime
PHYSFS_getLinkedVersion
PHYSFS_getMountPoint
PHYSFS_getRealDir
PHYSFS_getSearchPath
PHYSFS_getSearchPathCallback
PHYSFS_getUserDir
PHYSFS_getWriteDir
PHYSFS_init
PHYSFS_isDirectory
PHYSFS_isInit
PHYSFS_isSymbolicLink
PHYSFS_mkdir
PHYSFS_mount
PHYSFS_openAppend
PHYSFS_openRead
PHYSFS_openWrite
PHYSFS_permitSymbolicLinks
PHYSFS_read
PHYSFS_readSBE16
PHYSFS_readSBE32
PHYSFS_readSBE64
PHYSFS_readSLE16
PHYSFS_readSLE32
PHYSFS_readSLE64
PHYSFS_readUBE16
PHYSFS_readUBE32
PHYSFS_readUBE64
PHYSFS_readULE16
PHYSFS_readULE32
PHYSFS_readULE64
PHYSFS_removeFromSearchPath
PHYSFS_seek
PHYSFS_setAllocator
PHYSFS_setBuffer
PHYSFS_setSaneConfig
PHYSFS_setWriteDir
PHYSFS_supportedArchiveTypes
PHYSFS_swapSBE16
PHYSFS_swapSBE32
PHYSFS_swapSBE64
PHYSFS_swapSLE16
PHYSFS_swapSLE32
PHYSFS_swapSLE64
PHYSFS_swapUBE16
PHYSFS_swapUBE32
PHYSFS_swapUBE64
PHYSFS_swapULE16
PHYSFS_swapULE32
PHYSFS_swapULE64
PHYSFS_symbolicLinksPermitted
PHYSFS_tell
PHYSFS_utf8FromLatin1
PHYSFS_utf8FromUcs2
PHYSFS_utf8FromUcs4
PHYSFS_utf8ToUcs2
PHYSFS_utf8ToUcs4
PHYSFS_write
PHYSFS_writeSBE16
PHYSFS_writeSBE32
PHYSFS_writeSBE64
PHYSFS_writeSLE16
PHYSFS_writeSLE32
PHYSFS_writeSLE64
PHYSFS_writeUBE16
PHYSFS_writeUBE32
PHYSFS_writeUBE64
PHYSFS_writeULE16
PHYSFS_writeULE32
PHYSFS_writeULE64

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 330KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16f3eec1cd8597bfae34c8d79621cd9e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

glew32

zlib

openal32

opengl32

dbghelp

kernel32

user32

shell32

gdi32

advapi32

ws2_32

mswsock

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

Exports

Exports

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 330KB - Virtual size: 362KB

.gfids Size: 4KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 246KB - Virtual size: 245KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 330KB - Virtual size: 362KB

.gfids
Size: 4KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 246KB - Virtual size: 245KB