6a9c7aab95882dafb37465223cd56a5e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6a9c7aab95882dafb37465223cd56a5e_JaffaCakes118
Size

185KB
MD5

6a9c7aab95882dafb37465223cd56a5e
SHA1

b78f3084602669a7759e945152557aa58f5f2a39
SHA256

1790ad2136abfedbbe524842aed24c6ad2dadf3f3f2f46eae45ec6dee22b9477
SHA512

6d712d0f48ed079f83e3071426be08b3d874f69e29b106a3cc64271719835d38e24c61c63df4ef65e05d10e8e52b842fd4666091f63dfbe443ffb7f4c6d875d4
SSDEEP

3072:xvkwFi3lihSWwU8sQ/MOAuRRfNiEcxwC2Ofp0AavfrlSUguMrsDggAUAgAmE4hzf:xvkd3lirwU89wuffNVcxt0Aa5SUHM2Au

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a9c7aab95882dafb37465223cd56a5e_JaffaCakes118

Files

6a9c7aab95882dafb37465223cd56a5e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9dda55c8e8f366e0b9b8f2491b53a886

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringW
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCommandLineA
GetDateFormatA
GetEnvironmentStringsW
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetVersionExA
GlobalLock
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapReAlloc
IsDebuggerPresent
LCMapStringW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RtlUnwind
SetConsoleCtrlHandler
SetLastError
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WriteFile
lstrcmpiA
lstrcpyA

user32

TrackPopupMenu
UnionRect
SetTimer
SetClassLongA
MoveWindow
LoadStringA
IsIconic
GetWindowThreadProcessId
GetMenu
GetClassLongA
CreateWindowExA
FindWindowA
CheckMenuRadioItem
AppendMenuA
GetDlgItem

advapi32

MapGenericMask
CryptCreateHash
StartServiceW
OpenEncryptedFileRawW
DestroyPrivateObjectSecurity
AllocateLocallyUniqueId
InitializeSecurityDescriptor
GetTraceEnableLevel

ole32

CoTaskMemFree
StringFromGUID2
IsEqualGUID
CoTaskMemAlloc
CoGetMalloc
CoFileTimeNow
CoCreateInstance
CoCreateGuid
CoBuildVersion
CLSIDFromString

opengl32

glBegin
glTexParameterf
glTexCoord3sv
glRasterPos4s
glPushAttrib
glListBase
glLineWidth
glIndexi
glIndexd
glDisable
glColor4i
glClearAccum

ddraw

DDInternalLock
DirectDrawEnumerateExA

Exports

Exports

AudioCloseItem
BurnAtOnce
ConfigureCall
CopyRawObjPrmToStrm
D3D9ResourceGetMappedPointer
DVDPRVRFixateVideoSessionNoHCB
DriverGetVersion
EnterReleaseControl
EnumIIMInfoReset
EnumShootingModeRelease
EnumTvValueRelease
EventElapsedTime
FullView
GetAvValue
GetCurrentMediumType
GetDeviceProperties
GetDiscImageInfo
GetFileHeader
GetObjectInfo
GetSupportParamItemHead
GetTextureAlignmentOffset
HostGetFlags
IsoTrackSetBootOptions
Memcpy
Memcpy2DArrayToArray
MemcpyAsync
Memset
WaitForDeviceReady

Sections

.text
Size: 118KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9dda55c8e8f366e0b9b8f2491b53a886

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

opengl32

ddraw

Exports

Exports

Sections

.text Size: 118KB - Virtual size: 212KB

.data Size: 60KB - Virtual size: 64KB

.rsrc Size: 3KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 118KB - Virtual size: 212KB

.data
Size: 60KB - Virtual size: 64KB

.rsrc
Size: 3KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 4KB