3c1c9d90584f253fbab394eb972f695f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c1c9d90584f253fbab394eb972f695f_JaffaCakes118
Size

35KB
MD5

3c1c9d90584f253fbab394eb972f695f
SHA1

26f640ff8390fb5b463f3d3f96027fc1fb2ef453
SHA256

719ba6cc84a001d4bb10ba53004104652d9766b345bf99491c8b683198c1ec92
SHA512

b8d6578a9d7871bcf074f1eaa901aa77f020e2fb69c25591be8cccd2fe60461fd84ab5da393260945703c94625883d97c71cda7ddc7165171462e9da78dee076
SSDEEP

384:s8L903dtAuoKTNWA7cce4gC4g58MqryHq0:j03dtAHKTNMce4kF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c1c9d90584f253fbab394eb972f695f_JaffaCakes118

Files

3c1c9d90584f253fbab394eb972f695f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

20e8ee063756ddc411a76e40e7cc63c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\code\3.0\channels\InterfaceFunctionParameter\Win32\Release\InterfaceFunctionParameter.pdb

Imports

highpoly

??0A3d_Channel@@QAE@ABV0@@Z
?OneTimeInitialize@A3d_Channel@@UAEXXZ
?DoEvent@A3d_Channel@@UAEXHK@Z
?GetTimeStamp@A3d_Channel@@UAEKXZ
?SetTimeStamp@A3d_Channel@@UAEXXZ
?CheckIndexNrRemoval@A3d_Channel@@UAEXH@Z
?GetInternalChild@A3d_Channel@@UAEPAV1@H@Z
?CheckPublicChannelInstanceRemoval@A3d_Channel@@UAEXPAV1@H@Z
?AddMetaData@A3d_Channel@@UAEXAAVA3dFileSaver@@@Z
?SetChannelGroup@A3d_Channel@@UAEXPAVA3d_ChannelGroup@@@Z
?SetContextRenderCountName@A3d_Channel@@UAEXPAD@Z
?GetContextRenderCountName@A3d_Channel@@UAEPAVContextRenderCount@@XZ
??4A3d_Channel@@QAEAAV0@ABV0@@Z
??1ChannelFeedback@@QAE@XZ
?GetChild@A3d_Channel@@QAEPAV1@H@Z
??RShowDebugMessage@@QAEXPBD0@Z
?GetChannelName@A3d_Channel@@QAEPBDXZ
?SaveDataToFile@A3dFileSaver@@QAEHPBXI@Z
?SaveBlockSize@A3dFileSaver@@QAEHI@Z
?SaveTag@A3dFileSaver@@QAEHPBD@Z
?SaveChannel@A3d_Channel@@UAE_NAAVA3dFileSaver@@@Z
?GetChannelInterfaceType@A3d_Channel@@QAEHXZ
?CopyTagDataToPointer@A3dFileLoader@@QAEXPAX@Z
?GetInfoIfTag@A3dFileLoader@@QAE_NQAD@Z
?LoadChannel@A3d_Channel@@UAE_NAAVA3dFileLoader@@PAVA3d_ChannelGroup@@@Z
?AddChannelGuidDepend@A3d_Channel@@QAEXU_GUID@@PAVA3d_List@@@Z
?SetChannelInterfaceType@A3d_Channel@@UAEXH@Z
??RShowDebugMessage@@QAEXPBD@Z
?GetChannelType@A3d_Channel@@UAE?AVChannelType@@XZ
??0ChannelFeedback@@QAE@XZ
??1A3d_Channel@@UAE@XZ
?globalEngine@@3PAVEngineInterface@@A
?SetChannelName@A3d_Channel@@QAEXPBD@Z
??0ChannelType@@QAE@XZ
??0A3d_Channel@@QAE@XZ

interfacecreation

??0InterfaceCacheLink@@QAE@XZ
??1InterfaceCacheLink@@QAE@XZ

cr80_q3d

__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
?terminate@@YAXXZ
memset
??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

??0InterfaceFunctionParameter@@QAE@ABV0@@Z
??0InterfaceFunctionParameter@@QAE@XZ
??1InterfaceFunctionParameter@@UAE@XZ
??4InterfaceFunctionParameter@@QAEAAV0@ABV0@@Z
??_7InterfaceFunctionParameter@@6B@
?CallChannel@InterfaceFunctionParameter@@UAEXXZ
?DoDependencyInit@InterfaceFunctionParameter@@UAEXPAVA3d_List@@@Z
?GetChannelFromChannel@InterfaceFunctionParameter@@UAEPAVA3d_Channel@@PAV2@PAUChildInfo@@@Z
?GetChannelType@InterfaceFunctionParameter@@UAE?AVChannelType@@XZ
?GetFeedbackClass@InterfaceFunctionParameter@@UAEPAVChannelFeedback@@XZ
?GetInterfaceGUID@InterfaceFunctionParameter@@UAE?AU_GUID@@XZ
?GetInterfaceMemberNr@InterfaceFunctionParameter@@UAEHXZ
?GetParameterNr@InterfaceFunctionParameter@@UAEHXZ
?GetUniqueInterfaceDef@InterfaceFunctionParameter@@UAE?AUInterfaceDef@@XZ
?GetUseBaseType@InterfaceFunctionParameter@@UAE_NXZ
?LoadChannel@InterfaceFunctionParameter@@UAE_NAAVA3dFileLoader@@PAVA3d_ChannelGroup@@@Z
?SaveChannel@InterfaceFunctionParameter@@UAE_NAAVA3dFileSaver@@@Z
?SetChannelInterfaceType@InterfaceFunctionParameter@@UAEXH@Z
?SetInterfaceGUID@InterfaceFunctionParameter@@UAEXU_GUID@@@Z
?SetInterfaceMemberNr@InterfaceFunctionParameter@@UAEXH@Z
?SetParameterNr@InterfaceFunctionParameter@@UAEXH@Z
?SetUniqueInterfaceDef@InterfaceFunctionParameter@@UAEXUInterfaceDef@@@Z
?SetUseBaseType@InterfaceFunctionParameter@@UAEX_N@Z
?StoreRealTarget@InterfaceFunctionParameter@@UAEXPAVA3d_Channel@@@Z
GetType
InitDLL

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1017B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20e8ee063756ddc411a76e40e7cc63c2

Headers

File Characteristics

PDB Paths

Imports

highpoly

interfacecreation

cr80_q3d

kernel32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 1024B - Virtual size: 1017B

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 1024B - Virtual size: 1017B