342b907b93a4518d4996d69b729b8485_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

342b907b93a4518d4996d69b729b8485_JaffaCakes118
Size

873KB
MD5

342b907b93a4518d4996d69b729b8485
SHA1

cbffb7f875045e1539118ee2de77f1666a318401
SHA256

cbf7114c62caa37df9e110bb3cb9d35f7aabbf93b3a7517ce4fc4d5d67909945
SHA512

19d03a50ebfb472f673b4e279c18b8101a8a3bc9c9357227367b64a7d63afa6841a55d4c76fe27b265f924c4b9671adfc5622e6603be13ab0496361d39a92080
SSDEEP

24576:jK+YciML6ibCR54aeo0nhTdx4BAY/+2D+D2:W+Yi6oCR54aX0hTdxsx/+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
342b907b93a4518d4996d69b729b8485_JaffaCakes118

Files

342b907b93a4518d4996d69b729b8485_JaffaCakes118
.exe windows:5 windows x86 arch:x86

714113d04900ee706956088d8ee2514b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msacm32

acmDriverDetailsA
acmFormatTagEnumW
acmDriverAddA
acmStreamPrepareHeader
acmDriverMessage
acmStreamUnprepareHeader
acmFilterDetailsA
acmFormatEnumA
acmDriverAddW
acmMessage32
acmStreamMessage
acmFilterChooseA
acmFormatEnumW
acmFormatTagEnumA
acmFilterChooseW
acmFilterTagDetailsW
acmFilterTagEnumW
acmDriverID
acmFilterTagEnumA
acmFormatTagDetailsW
acmFilterDetailsW
acmDriverDetailsW
acmFilterTagDetailsA
acmDriverEnum
acmFormatSuggest
acmDriverOpen
acmStreamSize
acmFormatDetailsW
acmDriverPriority
acmFormatChooseW
acmFormatTagDetailsA
acmGetVersion
acmMetrics
acmDriverRemove

kernel32

SetConsoleWindowInfo
FindCloseChangeNotification
HeapFree
CreateNamedPipeA
FindActCtxSectionStringW
GetNamedPipeInfo
SignalObjectAndWait
lstrcpynW
Heap32ListNext
LZCloseFile
GlobalAddAtomW
SetFileApisToOEM
WaitNamedPipeW
PulseEvent
SetDefaultCommConfigW
ReadProcessMemory
GetModuleHandleExA
GetCurrentProcess
CreateThread
FlushConsoleInputBuffer
GlobalFindAtomA
SwitchToFiber
VerifyVersionInfoW
CloseHandle
HeapCreate
EnterCriticalSection
GetPrivateProfileSectionA
SetFileAttributesW
IsValidLocale
VirtualAlloc
WritePrivateProfileStringW
WriteConsoleOutputCharacterA
LocalAlloc
SetLocaleInfoA
InterlockedExchange
GetUserDefaultLCID
lstrcpynA
GetCommConfig
GlobalGetAtomNameA
CompareFileTime
LoadLibraryA
GetCurrentConsoleFont
IsValidCodePage
SetHandleInformation
ReadConsoleInputA
UnregisterWait
Thread32Next
IsBadHugeReadPtr

opengl32

wglDescribeLayerPlane
glAreTexturesResident
wglChoosePixelFormat
wglUseFontOutlinesW
glColor3d
glVertex2s
glVertex2dv
glCopyTexSubImage1D
glFrustum
glRasterPos4fv
glPopAttrib
glDepthRange
glScaled
glColor3b
glLoadMatrixf
glRectsv
glRasterPos2f
glClipPlane
glLightModeliv
glEvalCoord1dv
GlmfPlayGlsRecord
glTexCoord2dv
glClearColor
glArrayElement
wglSwapMultipleBuffers
glDrawPixels
wglCreateContext
glPushClientAttrib
glColor3usv
glColor4usv
glTexCoord4d
glGetLightiv
glTexCoord4sv

ntdll

RtlDestroyProcessParameters
RtlTimeToElapsedTimeFields
NtConnectPort
NtCreateDirectoryObject
NtAccessCheckAndAuditAlarm
NtQueryBootOptions
RtlFindLastBackwardRunClear
ZwCreateToken
RtlLargeIntegerShiftRight
NtQuerySecurityObject
ZwSystemDebugControl
ZwCreateSymbolicLinkObject
ispunct
RtlUpcaseUnicodeToMultiByteN
NtQuerySystemInformation
NtCompressKey
NtMapUserPhysicalPages
NtQueryDirectoryFile
ZwQueryMultipleValueKey
RtlInitNlsTables
NtQueryDefaultLocale
CsrCaptureMessageString
ZwOpenKey
RtlLookupAtomInAtomTable
ZwDeleteObjectAuditAlarm
RtlConvertUlongToLargeInteger
ZwSetEaFile
RtlImageRvaToVa
RtlDefaultNpAcl
NtTranslateFilePath
NtLockRegistryKey
ZwEnumerateValueKey
RtlEnumerateGenericTableAvl
ZwReplyWaitReplyPort
RtlPushFrame
RtlEqualUnicodeString
RtlDeactivateActivationContextUnsafeFast
RtlTraceDatabaseEnumerate
RtlDoesFileExists_U
RtlIsNameLegalDOS8Dot3
CsrGetProcessId
RtlMultiByteToUnicodeSize

user32

GetUserObjectSecurity
PtInRect
DlgDirListW
GetKeyboardState
SetInternalWindowPos
GetCaretPos
DdeConnectList
EqualRect
GetClipboardFormatNameW
InsertMenuItemA
DeleteMenu
GetWindowModuleFileName
UserLpkPSMTextOut
SetScrollPos
RecordShutdownReason
MapVirtualKeyExA
CharPrevW
SetWindowWord
UnregisterDeviceNotification
LoadMenuIndirectW
InsertMenuA
DdeAccessData
ExitWindowsEx
DdeInitializeW
GetMenuContextHelpId
GetKeyboardType
GetMenu
SetWindowsHookW
LoadMenuW
TrackPopupMenu
RealChildWindowFromPoint
DestroyIcon
OpenClipboard
SetWindowContextHelpId
GetMenuItemRect
GetIconInfo
VkKeyScanA
MonitorFromPoint
ScrollWindowEx
CallNextHookEx
UnregisterClassW

d3dim700

D3DTextureUpdate
Direct3D_HALCleanUp
Direct3DCreate
D3DRealloc
SurfaceFlipNotify
SetPriority
PaletteAssociateNotify
D3DBreakVBLock
GetLOD
Direct3DCreateDevice
D3DFree
FlushD3DDevices
SetLOD
DestroyTexture
GetPriority
CreateTexture
PaletteUpdateNotify
D3DMalloc

olecli32

OleDelete
PbCreateLinkFromClip
BmEqual
OleCreateLinkFromClip
OleDraw
ErrShow
ObjQuerySize
BmCopy
LeClone
LeCreateInvisible
MfSaveToStream
MfEnumFormat
OleQueryReleaseMethod
PbCreateFromTemplate
ErrUpdate
OleCreateInvisible
OleQueryLinkFromClip
GenSetData
GenSaveToStream
LeExecute
LeSetData
OleQueryReleaseError
MfChangeData
DibEnumFormat
OleSetTargetDevice
ObjQueryName
OleQueryProtocol
OleQueryOpen
SetNetName
DibCopy
LeGetData

Sections

.text
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

714113d04900ee706956088d8ee2514b

Headers

DLL Characteristics

File Characteristics

Imports

msacm32

kernel32

opengl32

ntdll

user32

d3dim700

olecli32

Sections

.text Size: 467KB - Virtual size: 467KB

.rdata Size: 303KB - Virtual size: 303KB

.data Size: 99KB - Virtual size: 1.5MB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 467KB - Virtual size: 467KB

.rdata
Size: 303KB - Virtual size: 303KB

.data
Size: 99KB - Virtual size: 1.5MB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB