29f7906e7ccbf7c81ac4bd6d53d8456a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

29f7906e7ccbf7c81ac4bd6d53d8456a_JaffaCakes118
Size

116KB
MD5

29f7906e7ccbf7c81ac4bd6d53d8456a
SHA1

0af3a1e7a11361d81fd836fdf91df0235f481deb
SHA256

5432fa5b140d88b5de373d6f23126cc5d3c26b1233e817c3ffba958bffdbc5ac
SHA512

12987a32f5413eb278e81aba6fcc2c6e3180fe2ae887238f1770f0ac8459d68093b399a5a7d0c1c5d3298d33425fd007173305ae39103d6b3ae685f4c296afb4
SSDEEP

3072:sXO2dvJhbs8P8AZOYqab/8OZATAmHhzWjhkbOjxo:qou8eOwb/XkdBi2bOjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f7906e7ccbf7c81ac4bd6d53d8456a_JaffaCakes118

Files

29f7906e7ccbf7c81ac4bd6d53d8456a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

224dae9d9bd06488fe90771b3e3dffb6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

d3dx9_42

D3DXQuaternionNormalize
D3DXMatrixTransformation
D3DXMatrixInverse
D3DXGetImageInfoFromFileInMemory
D3DXMatrixDecompose
D3DXMatrixMultiply
D3DXQuaternionRotationMatrix

highpoly

?SetChannelInterfaceType@A3d_Channel@@UAEXH@Z
??RShowDebugMessage@@QAEXPBDH@Z
??0A3d_Channel@@QAE@XZ
?SetChildCreationCount@A3d_Channel@@QAEXH@Z
?SetChildCreateType@A3d_Channel@@QAEXUChildCreation@@H@Z
?GetChild@A3d_Channel@@QAEPAV1@H@Z
?LoadChannel@A3d_Channel@@UAE_NAAVA3dFileLoader@@PAVA3d_ChannelGroup@@@Z
?SaveChannel@A3d_Channel@@UAE_NAAVA3dFileSaver@@@Z
??1A3d_Channel@@UAE@XZ
?SetChannelName@A3d_Channel@@QAEXPBD@Z
?SetChild@A3d_Channel@@QAEHPAV1@HH@Z
??RShowDebugMessage@@QAEXPBD@Z
??1A3dFileLoader@@UAE@XZ
?GetBuffer@A3dFileLoader@@QAEPBDXZ
?GetBufferSize@A3dFileLoader@@QAEHXZ
?LoadFile@A3dFileLoader@@QAE_NPBD@Z
??0A3dFileLoader@@QAE@XZ
??0ChannelType@@QAE@XZ
??0A3d_Channel@@QAE@ABV0@@Z
?OneTimeInitialize@A3d_Channel@@UAEXXZ
?DoEvent@A3d_Channel@@UAEXHK@Z
?GetChannelType@A3d_Channel@@UAE?AVChannelType@@XZ
?GetChannelFromChannel@A3d_Channel@@UAEPAV1@PAV1@PAUChildInfo@@@Z
?GetTimeStamp@A3d_Channel@@UAEKXZ
?SetTimeStamp@A3d_Channel@@UAEXXZ
?CheckIndexNrRemoval@A3d_Channel@@UAEXH@Z
?GetInternalChild@A3d_Channel@@UAEPAV1@H@Z
?CheckPublicChannelInstanceRemoval@A3d_Channel@@UAEXPAV1@H@Z
?AddMetaData@A3d_Channel@@UAEXAAVA3dFileSaver@@@Z
?SetChannelGroup@A3d_Channel@@UAEXPAVA3d_ChannelGroup@@@Z
?GetFeedbackClass@A3d_Channel@@UAEPAVChannelFeedback@@XZ
?SetContextRenderCountName@A3d_Channel@@UAEXPAD@Z
?GetContextRenderCountName@A3d_Channel@@UAEPAVContextRenderCount@@XZ
??4A3d_Channel@@QAEAAV0@ABV0@@Z

scenecontainer

?GetName@Material@Importing@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Material@Importing@@UAE@XZ
?GetType@Light@Importing@@QBE?AW4LightType@12@XZ
?GetFovX@Camera@Importing@@QBEMXZ
?GetNearZ@Camera@Importing@@QBEMXZ
?GetFarZ@Camera@Importing@@QBEMXZ
??_7Key@Importing@@6B@
?GetTime@Key@Importing@@UBEKXZ
??0Transform@Importing@@QAE@XZ
??0Light@Importing@@QAE@ABV01@@Z
?GetName@Light@Importing@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Light@Importing@@UAE@XZ
??0Camera@Importing@@QAE@ABV01@@Z
?GetName@Camera@Importing@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetPosition@Key@Importing@@UBE?AUD3DXVECTOR3@@XZ
??1Camera@Importing@@UAE@XZ
??0Transform@Importing@@QAE@ABUD3DXMATRIX@@@Z
??0Material@Importing@@QAE@XZ
??1Transform@Importing@@UAE@XZ
?Indentity@Transform@Importing@@2UD3DXMATRIX@@A
??1Key@Importing@@UAE@XZ
?GetScale@Key@Importing@@UBE?AUD3DXVECTOR3@@XZ
?GetRotation@Key@Importing@@UBE?AUD3DXQUATERNION@@XZ
??4Material@Importing@@QAEAAV01@ABV01@@Z

shlwapi

PathFindFileNameA
PathFileExistsA

kernel32

HeapFree
GetProcessHeap
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
GetCurrentThreadId
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLastError
lstrlenA
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetTickCount

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysFreeString
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo

cr80_q3d

_CxxThrowException
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
??2@YAPAXI@Z
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
?terminate@@YAXXZ
toupper
_CIsqrt
memset
??_V@YAXPAX@Z
strcpy_s
tolower
??_U@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_onexit
_invalid_parameter_noinfo
malloc
_CIpow
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_adjust_fdiv
??0exception@std@@QAE@ABQBD@Z
_CItan

cp80_q3d

??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

Exports

Exports

??0CGRConverter@Importing@@QAE@ABV01@@Z
??0CGRConverter@Importing@@QAE@XZ
??1CGRConverter@Importing@@UAE@XZ
??4CGRConverter@Importing@@QAEAAV01@ABV01@@Z
??_7CGRConverter@Importing@@6B@
?AddCameraNodeToCgr@CGRConverter@Importing@@IAEHAAVCgr@2@PAVSceneContainer@2@ABVTransform@2@ABVNode@2@@Z
?AddGeometryNodeToCgr@CGRConverter@Importing@@IAEHAAVCgr@2@PAVSceneContainer@2@ABVTransform@2@ABVNode@2@@Z
?AddLightNodeToCgr@CGRConverter@Importing@@IAEHAAVCgr@2@PAVSceneContainer@2@ABVTransform@2@ABVNode@2@@Z
?CallChannel@CGRConverter@Importing@@UAEXXZ
?Convert@CGRConverter@Importing@@UAEHPAVSceneContainer@2@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H1AAV45@222@Z
?CreateChannelChildren@CGRConverter@Importing@@IAEXXZ
?DoDependencyInit@CGRConverter@Importing@@UAEXPAVA3d_List@@@Z
?DoOptionsDialog@CGRConverter@Importing@@UAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?LoadChannel@CGRConverter@Importing@@UAE_NAAVA3dFileLoader@@PAVA3d_ChannelGroup@@@Z
?SaveChannel@CGRConverter@Importing@@UAE_NAAVA3dFileSaver@@@Z
GetType
InitDLL

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

224dae9d9bd06488fe90771b3e3dffb6

Headers

File Characteristics

Imports

d3dx9_42

highpoly

scenecontainer

shlwapi

kernel32

ole32

oleaut32

cr80_q3d

cp80_q3d

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB