3f3cbe7b22f145298bc17765bb18e818_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f3cbe7b22f145298bc17765bb18e818_JaffaCakes118
Size

168KB
MD5

3f3cbe7b22f145298bc17765bb18e818
SHA1

27fe27c8f47077b3501b23b1e50d8d3e58ff4708
SHA256

070a85f1b869f63dcf84280e594f4f5a5fe35e22371618cc1d032eb2140b5e70
SHA512

363e9f66d7bac5700677f7744f9c1107fdc5e6b08c17c987fa2f1cda231d1a8d665710076ad03caaf388c32121fac4e0f1fca5dee758c1e7bcd4e4c292610dc6
SSDEEP

3072:F0Yw0zC0WeqzmbDo62RQSrB9OhK+AYYZymW3xz29:FBzWeqzmb862RHrBYhK+AYYzMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f3cbe7b22f145298bc17765bb18e818_JaffaCakes118

Files

3f3cbe7b22f145298bc17765bb18e818_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a18e7065b70220e9ce890f78c87249b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

M:\vraysdk\pdb\x86\vc8\vray_TexClamp.pdb

Imports

vray

??0VRayParameterListDesc@VUtils@@QAE@XZ
?addParamTexture@VRayParameterListDesc@VUtils@@QAEHPADHPBD1@Z
?addParamTextureInt@VRayParameterListDesc@VUtils@@QAEHPADHPBD1@Z
?addParamTextureFloat@VRayParameterListDesc@VUtils@@QAEHPADHPBD1@Z
?addOutputParamTexture@VRayParameterListDesc@VUtils@@QAEHPADPBD1@Z
?registerParameters@VRayParameterListDesc@VUtils@@QAEHPAVVRayPluginHost@2@PAVVRayPluginDesc@2@@Z
?setParameter@VRayParameterList@VUtils@@QAEHPAVVRayPluginParameter@2@@Z
?getParam@VRayParameterList@VUtils@@QAEPAVVRayPluginParameter@2@PBD@Z
?deleteParameterList@VRayParameterListDesc@VUtils@@QAEXPAUVRayParameterList@2@@Z
?newParameterList@VRayParameterListDesc@VUtils@@QAEPAUVRayParameterList@2@XZ
?setParamCache@VRayParameterList@VUtils@@QAEXPADPAPAUTextureIntInterface@2@@Z
?setParamCache@VRayParameterList@VUtils@@QAEXPADPAPAUTextureFloatInterface@2@@Z
?setParamCache@VRayParameterList@VUtils@@QAEXPADPAPAUTextureInterface@2@@Z
?setOutputParamCache@VRayParameterList@VUtils@@QAEXPADPAUTextureInterface@2@@Z
??1VRayParameterListDesc@VUtils@@QAE@XZ
?frameBegin@VRayPluginInterface@VUtils@@UAEXPAVVRayRenderer@2@@Z

msvcr80

memset
memcpy
free
_heapchk
_heapwalk
malloc
_CxxThrowException
__CxxFrameHandler
_vsnprintf
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_malloc_crt
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_local_unwind2
__clean_type_info_names_internal
_purecall

kernel32

LoadLibraryA
GetProcAddress
Sleep
InterlockedExchange
OutputDebugStringA

Exports

Exports

getLibDesc

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a18e7065b70220e9ce890f78c87249b5

Headers

File Characteristics

PDB Paths

Imports

vray

msvcr80

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.text1 Size: 4KB - Virtual size: 2KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 6KB

.data1 Size: 4KB - Virtual size: 3KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 32KB - Virtual size: 28KB

.text1
Size: 4KB - Virtual size: 2KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 6KB

.data1
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 8KB - Virtual size: 5KB