16f238660008823dd5ebd4f77a40519b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

16f238660008823dd5ebd4f77a40519b_JaffaCakes118
Size

432KB
MD5

16f238660008823dd5ebd4f77a40519b
SHA1

3d14d0d2c13ae1846c250af936cadd005b9def4e
SHA256

53e23cf4bd14a5bf6123c2b215f90a0850685a938fedc1a41f682a0fe76c8c4b
SHA512

b0d737195c15114612ebc674d40f21217ed12a92ad14648cb631ff429490b8c62c0ed60783f0346cc606ba0fe2eb28afbd11c66638ad718262723a6b2ad2f7e7
SSDEEP

6144:EHDW6+2oAs1AMgtrKVCUyIqGGBVVtQVCByL:GDW6Sjcl2ostL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f238660008823dd5ebd4f77a40519b_JaffaCakes118

Files

16f238660008823dd5ebd4f77a40519b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2dda8a3c65452697c1266752345a26b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\p4_OD5\advtools\Stress\OD5\ATIODE\build\2k\B_rel\ATIODE.pdb

Imports

opengl32

glTranslatef
glTexImage2D
glTexParameteri
glDrawBuffer
wglGetProcAddress
glGenTextures
wglCreateContext
glEnableClientState
glClear
glClearColor
glTexParameterf
glScaled
glVertex3i
glTexCoord2f
glEnd
glPopAttrib
glDisable
glBegin
glShadeModel
glTranslated
glMultMatrixd
glDrawElements
glLoadIdentity
wglDeleteContext
glHint
glEnable
glLightfv
glTexCoordPointer
glBindTexture
glVertexPointer
glViewport
glMatrixMode
glVertex3f
glPushAttrib
glBlendFunc
glPushMatrix
glReadBuffer
glReadPixels
glPopMatrix
wglMakeCurrent
glColorPointer

kernel32

GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
SetStdHandle
FlushFileBuffers
InitializeCriticalSection
VirtualQuery
InterlockedExchange
RtlUnwind
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
GetTickCount
GetModuleHandleA
QueryPerformanceCounter
QueryPerformanceFrequency
MapViewOfFile
UnmapViewOfFile
FreeLibrary
Sleep
GetProcAddress
LoadLibraryA
CreateFileMappingA
SetConsoleCtrlHandler
CloseHandle
WriteFile
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
SetFilePointer
GetLastError
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetCurrentProcessId
RaiseException
IsBadCodePtr
IsBadReadPtr
FreeEnvironmentStringsA
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
GetVersionExA
GetProcessHeap
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA

user32

RegisterClassA
ChangeDisplaySettingsA
EnumDisplayDevicesA
LoadCursorA
SetWindowTextA
ShowWindow
DefWindowProcA
CreateWindowExA
ShowCursor
GetDC
GetMonitorInfoA
LoadIconA
PostQuitMessage
EnumDisplayMonitors
DestroyWindow
DispatchMessageA
PeekMessageA
TranslateMessage

gdi32

SetPixelFormat
ChoosePixelFormat
GetStockObject
SwapBuffers

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PACK
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f2dda8a3c65452697c1266752345a26b

Headers

File Characteristics

PDB Paths

Imports

opengl32

kernel32

user32

gdi32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 216KB - Virtual size: 213KB

.data Size: 8KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 1KB

PACK Size: 144KB - Virtual size: 380KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 216KB - Virtual size: 213KB

.data
Size: 8KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 1KB

PACK
Size: 144KB - Virtual size: 380KB