666b9f385d55dab13f6aa8b9c77c5f1c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

666b9f385d55dab13f6aa8b9c77c5f1c_JaffaCakes118
Size

52KB
MD5

666b9f385d55dab13f6aa8b9c77c5f1c
SHA1

7d10b1bc5de1fdb05eaf20ca327cc688765f27c5
SHA256

938fe6f4b3c94e7e4f1dbcc23dc33fb87d72f74d9378a5985d1d513af3b52754
SHA512

b7041165b9563d526e70a0335bda06b75ecfcb9e14c798227a9cf03ae47be90414dec922340dd2fc006c50e8be1c3508bc50b1a15261263ab64484669c440b05
SSDEEP

768:wTLVFt801Hnae0gsH+lR6UVnDYQivlm5GGm76DbhzebeE/DJ4d/P:wTJH8Iae0gseaUVUNvlqGGLhi4/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666b9f385d55dab13f6aa8b9c77c5f1c_JaffaCakes118

Files

666b9f385d55dab13f6aa8b9c77c5f1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c60ec5ceb3aa4fbd565807d4d7838e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glRenderMode
glGetIntegerv
glCopyTexSubImage2D
glRasterPos3fv
glBindTexture
glPopClientAttrib
glRectf
glEdgeFlagPointer
glColor3f
glGetTexImage
glTexEnvi
glFogi
glEnable
glVertex2d
glPushClientAttrib

glu32

gluNewNurbsRenderer
gluBeginCurve
gluProject
gluEndSurface
gluTessCallback
gluQuadricDrawStyle
gluPickMatrix
gluPwlCurve
gluBeginTrim
gluSphere
gluDeleteNurbsRenderer
gluGetTessProperty
gluQuadricCallback
gluBuild1DMipmaps
gluTessVertex

ole32

GetRunningObjectTable
CoFileTimeNow
DoDragDrop
OleCreateFromData
StgOpenStorageEx
OleSetClipboard
CoTaskMemRealloc
OleRun
StgCreateStorageEx
OleSetMenuDescriptor
CoRegisterPSClsid
CreateBindCtx
OleGetIconOfFile
CoGetMarshalSizeMax

kernel32

VirtualQuery
IsBadCodePtr
HeapSize
LocalReAlloc
DeleteCriticalSection
GlobalFree
CompareStringA
FoldStringA
HeapAlloc
GetOEMCP
VirtualProtect
GetModuleHandleA
GetProcAddress
QueryPerformanceCounter
SetHandleInformation
GetModuleFileNameA
GetHandleInformation
GetStdHandle
LocalHandle
GetLastError
VirtualAlloc
GetTickCount
ResetEvent
GetVersion
ResumeThread
DeleteFileA
GetStartupInfoA

usp10

ScriptStringXtoCP
ScriptIsComplex
ScriptPlace
ScriptStringFree
ScriptShape
ScriptBreak
ScriptStringAnalyse
ScriptString_pLogAttr
ScriptXtoCP
ScriptString_pcOutChars
ScriptGetCMap
ScriptCPtoX
ScriptApplyLogicalWidth

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c60ec5ceb3aa4fbd565807d4d7838e0

Headers

File Characteristics

Imports

opengl32

glu32

ole32

kernel32

usp10

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 47KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 47KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 1KB - Virtual size: 1KB