4b300daf41016990c98e237fade42b15_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4b300daf41016990c98e237fade42b15_JaffaCakes118
Size

195KB
MD5

4b300daf41016990c98e237fade42b15
SHA1

132f1d6824cbd26002104adaf86ca003c3096ca4
SHA256

9f8192b8fe75845e54a0e35aac93f2d179e39241944c0bb0672d2800cb61eca5
SHA512

e90f2b89bb0c8b260f2cc926c04db7d118a86bed2df5c2d0571e12eaab9d4f484f16468a3c6e0fb72b866d8508c2abb6dda566c16b7b4c325ca8ce5e0f292cea
SSDEEP

6144:ixJGufDvwaSo641YQ1ar22HCmU71d7YDh16:ixJbbYah6oYdr22D1DT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b300daf41016990c98e237fade42b15_JaffaCakes118

Files

4b300daf41016990c98e237fade42b15_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1387da9d69023f1c5b6ad5ae39378187

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateConsoleScreenBuffer
CreateFileA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FileTimeToLocalFileTime
FindFirstFileA
GetACP
GetCommandLineA
GetConsoleOutputCP
GetCurrentThread
GetDriveTypeA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetThreadContext
GetTickCount
GetVersionExA
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapReAlloc
MulDiv
MultiByteToWideChar
OpenProcess
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsGetValue
UnmapViewOfFile
VirtualQueryEx
lstrcpyA
lstrcpynA
lstrlenA

user32

SystemParametersInfoA
UpdateWindow
SetWindowPos
SetScrollInfo
SetForegroundWindow
LoadIconA
IsDlgButtonChecked
DefFrameProcA
DrawIconEx
EndDialog
GetClientRect
GetDlgItemTextA
GetMenuItemID
CheckMenuItem
BeginDeferWindowPos
GetFocus

advapi32

AllocateAndInitializeSid
DuplicateEncryptionInfoFile
StartTraceA
MakeAbsoluteSD
LsaNtStatusToWinError
LsaEnumeratePrivileges
CryptDuplicateKey
LookupPrivilegeValueW
InitiateSystemShutdownW
InitializeSid
DuplicateToken

ole32

IsEqualGUID
StringFromGUID2
CreateAntiMoniker
CoGetMalloc
CoCreateInstance
CoCreateGuid
CLSIDFromString

opengl32

glVertex2f
glTexParameterf
glTexCoord4s
glTexCoord3sv
glTexCoord1s
glPixelMapusv
glMapGrid2d
glIndexub
glGetDoublev
glColor3fv
glClearStencil
wglCreateLayerContext

ddraw

DirectDrawCreate
DirectDrawCreateClipper

Exports

Exports

AFLock
AddDataToImageItem
BurnAtOnce
ConvertToCIFFJPEG
CreateChannelDesc
D3D10ResourceGetMappedArray
DriverGetVersion
EnumAvValueReset
EnumImageItemPropertyNext
EnumImageItemPropertyReset
EnumItemReset
EnumMCCustomSetNumberReset
EnumRelCamSettingNext
EventDestroy
FullView
GLSetGLDevice
GetAvailableDrives
GetDllsVersionEx
GetFile2
GetImageDataInItemCount
GetRelCamSettingData
GetSupportParamValueHead
GetSymbolAddress
GraphicsResourceSetMapFlags
GraphicsUnmapResources
HostGetFlags
MakeMyColorData
Memcpy2DToArrayAsync
Memset
RegisterVar
RuntimeGetVersion
TEMPVMGIServicesUnfinalizeMedium
UnbindTexture

Sections

.text
Size: 128KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1387da9d69023f1c5b6ad5ae39378187

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

opengl32

ddraw

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 216KB

.data Size: 60KB - Virtual size: 60KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 128KB - Virtual size: 216KB

.data
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 4KB