3e74164d82e8d43a24edcb335dd7b76a_JaffaCakes118

General

Target

3e74164d82e8d43a24edcb335dd7b76a_JaffaCakes118
Size

48KB
MD5

3e74164d82e8d43a24edcb335dd7b76a
SHA1

27a984263250d445245574dafedeb36c6769771f
SHA256

0f55173e3568f5462de1df312f77192adb75efe7c4a4ba50341e06dd2e648f27
SHA512

fcb982340567ff320f486c22b89d9e0ae5e668668872a809ab450aab635d696b62ad0f6f8d314c34e434c20d329846c7746785c0998ece9e0554dfc5924d3d87
SSDEEP

768:IALNl++pdrMz4xvtCTgKoZHrefLiB9pbuhROyTt8upqoqfeu1+:dLNnMz4vCTg/yfwo8yB8nom1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e74164d82e8d43a24edcb335dd7b76a_JaffaCakes118

Files

3e74164d82e8d43a24edcb335dd7b76a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cefc6b87532ce853f2f178fc144f58fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetModuleHandleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetLastError
VirtualProtect
FlushInstructionCache
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetCommandLineA
GetVersion
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc

user32

GetAsyncKeyState

opengl32

glColor4f
glGetIntegerv
glGetFloatv
glPolygonMode
glViewport
glVertex3fv
glVertex3f
glVertex2f
glTranslatef
glEnd
glEnable
glClear
glBegin

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cefc6b87532ce853f2f178fc144f58fb

Headers

File Characteristics

Imports

kernel32

user32

opengl32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 4KB