4bb4c5c9f426611d342487915cd399b1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4bb4c5c9f426611d342487915cd399b1_JaffaCakes118
Size

36KB
MD5

4bb4c5c9f426611d342487915cd399b1
SHA1

8adae18879f12801226430b713e3187bf1537f48
SHA256

d2a41116d006575fc4d76044f9ccf21c2b6aae72de5e53c5c0f7dc9515ddd5b2
SHA512

c47d9fc1666a5f7d2d06d86e05ca27e5b1da4916674c1f170b030497d1fe46da1e90f6edef5d9437622585852557bd9e5460f4f6c1aee2ec9f85888268fcc251
SSDEEP

384:3NH5L9ZSbZH2OP+rQGiEqbElgoXBiLRAvM21WIBi0vuQysjevpzQWLq1:3NLZNOGpYIpWAkIBfuSjWsOq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bb4c5c9f426611d342487915cd399b1_JaffaCakes118

Files

4bb4c5c9f426611d342487915cd399b1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c4ec753b25746e1f1560964c69c048ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

d3dx9_25

D3DXPlaneFromPointNormal
D3DXVec3Normalize
D3DXMatrixInverse

highpoly

??1A3d_Channel@@UAE@XZ
?CheckRenderCount@A3d_Channel@@IAE_NXZ
?GetChildTypeCount@A3d_Channel@@QAEHU_GUID@@@Z
?AddChannelGuidDepend@A3d_Channel@@QAEXU_GUID@@PAVA3d_List@@@Z
?SetChannelGroup@A3d_Channel@@UAEXPAVA3d_ChannelGroup@@@Z
?AddMetaData@A3d_Channel@@UAEXPBD@Z
?CheckPublicChannelInstanceRemoval@A3d_Channel@@UAEXPAV1@H@Z
?GetInternalChild@A3d_Channel@@UAEPAV1@H@Z
?CheckIndexNrRemoval@A3d_Channel@@UAEXH@Z
?SetTimeStamp@A3d_Channel@@UAEXXZ
?GetTimeStamp@A3d_Channel@@UAEKXZ
?GetChannelFromChannel@A3d_Channel@@UAEPAV1@PAV1@PAUChildInfo@@@Z
?SetChannelInterfaceType@A3d_Channel@@UAEXH@Z
?GetChannelType@A3d_Channel@@UAE?AVChannelType@@XZ
?DoEvent@A3d_Channel@@UAEXHK@Z
?OneTimeInitialize@A3d_Channel@@UAEXXZ
??0A3d_Channel@@QAE@ABV0@@Z
??4A3d_Channel@@QAEAAV0@ABV0@@Z
??0ChannelType@@QAE@XZ
?SetChildCreateType@A3d_Channel@@QAEXUChildCreation@@H@Z
?SetChildCreationCount@A3d_Channel@@QAEXH@Z
??RShowDebugMessage@@QAEXPBD@Z
?SetChannelName@A3d_Channel@@QAEXPBD@Z
??0A3d_Channel@@QAE@XZ
?GetChildFromLinkGuid@A3d_Channel@@QAEPAV1@U_GUID@@H@Z
?GetChild@A3d_Channel@@QAEPAV1@H@Z
?SaveDataToFile@A3dFileSaver@@QAEHPBXK@Z
?SaveBlockSize@A3dFileSaver@@QAEHK@Z
?SaveTag@A3dFileSaver@@QAEHPBD@Z
?SaveChannel@A3d_Channel@@UAE_NAAVA3dFileSaver@@@Z
?CopyTagDataToPointer@A3dFileLoader@@QAEXPAX@Z
?GotoTag@A3dFileLoader@@QAE_NQADH@Z
?LoadChannel@A3d_Channel@@UAE_NAAVA3dFileLoader@@PAVA3d_ChannelGroup@@@Z

user32

GetClientRect
PostMessageA
GetWindowRect

msvcp71

?_Nomemory@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr71

??0exception@@QAE@XZ
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??3@YAXPAX@Z
??_V@YAXPAX@Z
??1exception@@UAE@XZ
free
_CIpow
malloc
_callnewh
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3

kernel32

DisableThreadLibraryCalls

Exports

Exports

??0Aco_DX8_Command@@QAE@ABV0@@Z
??0Aco_DX8_Command@@QAE@XZ
??1Aco_DX8_Command@@UAE@XZ
??4Aco_DX8_Command@@QAEAAV0@ABV0@@Z
??_7Aco_DX8_Command@@6B@
?BuildBumpMap@Aco_DX8_Command@@UAEXPAUIDirect3DTexture9@@@Z
?BuildDisplaceMap@Aco_DX8_Command@@UAEXPAUIDirect3DTexture9@@@Z
?CallChannel@Aco_DX8_Command@@UAEXXZ
?CreateLargeImage@Aco_DX8_Command@@UAEXXZ
?DoDependencyInit@Aco_DX8_Command@@UAEXPAVA3d_List@@@Z
?GetCommand@Aco_DX8_Command@@UAEHXZ
?GetUpdateChannelname@Aco_DX8_Command@@UAE_NXZ
?LoadChannel@Aco_DX8_Command@@UAE_NAAVA3dFileLoader@@PAVA3d_ChannelGroup@@@Z
?SaveChannel@Aco_DX8_Command@@UAE_NAAVA3dFileSaver@@@Z
?SetCommand@Aco_DX8_Command@@UAEXH@Z
?SetUpdateChannelname@Aco_DX8_Command@@UAEX_N@Z
?UpdateOceanParameters@Aco_DX8_Command@@UAEXXZ
GetType
InitDLL

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4ec753b25746e1f1560964c69c048ee

Headers

File Characteristics

Imports

d3dx9_25

highpoly

user32

msvcp71

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 328B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 328B

.reloc
Size: 4KB - Virtual size: 2KB