31792b4ea594fe10a0048ebef5e62b7b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

31792b4ea594fe10a0048ebef5e62b7b_JaffaCakes118
Size

115KB
MD5

31792b4ea594fe10a0048ebef5e62b7b
SHA1

48686195446429329435903ae435f678278d6fb2
SHA256

1dfa6788407438cd7c0e1caa846c30b38a294fa536fc2bef18c3783df1985954
SHA512

643085dc4147acbac3bef581983e23545738a33d7ac7308c5b32e124fbc400ed4d768b4366d36eb3ab6174353ff370427e7f5042cb16674334543888e83db822
SSDEEP

1536:bUU4AMkSLJhxnsraFDtQ6hR2sdC3hhWAUwTE0DKh5:oTAiLJznsravQ0RaDWAUwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31792b4ea594fe10a0048ebef5e62b7b_JaffaCakes118

Files

31792b4ea594fe10a0048ebef5e62b7b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9d12add94639e582719545094f766712

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\RcA\Desktop\cgp\Debug\cgp.pdb

Imports

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsProcessorFeaturePresent
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameW
VirtualQuery
FreeLibrary
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
EncodePointer
ExitProcess
GetModuleHandleA
GetVersionExA
CreateFileMappingA
MapViewOfFile
LocalAlloc
LocalFree
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileA
ReadFile
SetFilePointer
Sleep

user32

wsprintfA
GetFocus
DispatchMessageA
GetMessageA
TranslateMessage
PeekMessageA
GetClientRect
GetSystemMetrics
ShowWindow
GetDC
GetWindowRect
CreateWindowExA
CreateWindowExW
AdjustWindowRect
RegisterClassA
RegisterClassW
LoadCursorA
LoadIconA
GetCursorPos
SetCapture
ReleaseCapture
GetKeyState
DestroyWindow
EndPaint
BeginPaint
PostQuitMessage
DefWindowProcA
PostMessageA
SetSysColors
GetSysColor
InvalidateRect
ReleaseDC
MessageBoxA

gdi32

DeleteDC
CreateSolidBrush
GetObjectA
GetPixelFormat
UnrealizeObject
DescribePixelFormat
ChoosePixelFormat
SetPixelFormat
CreatePalette
SetSystemPaletteUse
SelectPalette
RealizePalette
SwapBuffers
GetPaletteEntries
SetPaletteEntries
GetStockObject
CreateCompatibleDC
CreateDIBSection
SelectObject
SetDIBits
GdiFlush
DeleteObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseColorA

opengl32

glEnd
glPopMatrix
glVertex2f
glBegin
glTranslatef
glColor3ub
glPolygonMode
glLoadIdentity
glPushMatrix
glReadPixels
glRasterPos2f
glTexImage2D
glTexParameteri
glBindTexture
glGenTextures
glGetIntegerv
glGetDoublev
glVertex3f
glTexCoord2f
glNormal3f
glTexGeni
wglDeleteContext
wglCreateContext
wglMakeCurrent
glShadeModel
glClearColor
glClearDepth
glDepthFunc
glHint
glLightModeli
glMaterialfv
glColorMaterial
glViewport
glClear
glLightfv
glEnable
glVertex3d
glVertex3fv
glMatrixMode
glOrtho
glScalef
glRectf
glDisable
glRotatef

glu32

gluPerspective
gluLookAt
gluNewQuadric
gluQuadricDrawStyle
gluQuadricTexture
gluQuadricNormals
gluSphere
gluUnProject

glut32

glutPostRedisplay
glutWireTorus
glutSolidCube
glutSolidTeapot
glutSwapBuffers
glutMainLoop
glutIdleFunc
glutPassiveMotionFunc
glutMotionFunc
glutMouseFunc
glutKeyboardFunc
glutSpecialFunc
glutDisplayFunc
glutReshapeFunc
glutInitWindowPosition
glutInitWindowSize
__glutCreateWindowWithExit
__glutInitWithExit
glutBitmapCharacter
glutBitmapWidth
glutInitDisplayMode
glutSolidSphere
glutWireSphere

msvcr100d

_exit
_onexit
_lock
__dllonexit
memset
fclose
fopen
free
sprintf
strcmp
fscanf
feof
fprintf
rand
cos
sin
fmod
srand
exit
_time64
malloc
_ftol
sscanf
vsprintf
_CRT_RTC_INITW
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_amsg_exit
__getmainargs
_unlock
_XcptFilter
_cexit
__initenv
_CrtSetCheckCount
_CrtDbgReportW
_initterm
_initterm_e
_crt_debugger_hook
?terminate@@YAXXZ
_controlfp_s
_invoke_watson
_except_handler4_common

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d12add94639e582719545094f766712

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

opengl32

glu32

glut32

msvcr100d

advapi32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 5KB - Virtual size: 3.9MB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 18KB - Virtual size: 17KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 5KB - Virtual size: 3.9MB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 18KB - Virtual size: 17KB