86fd09c62c06674ec7a8c02a37ef7367_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

86fd09c62c06674ec7a8c02a37ef7367_JaffaCakes118
Size

1.2MB
MD5

86fd09c62c06674ec7a8c02a37ef7367
SHA1

0be3d83aa293c3e7412d5767d4e0e43c83582c0e
SHA256

a1f9f696d8b862a14ce317ec7e07d6ffbffc28ac55d5dfa56a4ad44216d3e2bd
SHA512

13237e0211d661dd86d290378a41e40442821db3681cfc4f5d2a97fdd65ea40dff45bad519ac4355951f29200cc42867b135b74ca3f633f4d5fa875f633db05f
SSDEEP

24576:SAcqBZ0XvPn3Av3gacBz5qiLwzIUu94y5CEcTz3uymS19YL:wvuqLwzIUuuqO3u1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86fd09c62c06674ec7a8c02a37ef7367_JaffaCakes118

Files

86fd09c62c06674ec7a8c02a37ef7367_JaffaCakes118
.dll windows:6 windows x86 arch:x86

5ad4d00e3b1c4d820aa609ce060412d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\admin\Desktop\ChristWareAmongUs-master\Release\ChristWareAU.pdb

Imports

kernel32

GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
QueryPerformanceFrequency
GetProcAddress
QueryPerformanceCounter
GetCurrentThread
GetLastError
GetCurrentProcess
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
MultiByteToWideChar
SetLastError
AllocConsole
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
CloseHandle
GlobalAlloc
VirtualQuery
CreateThread

user32

OpenClipboard
CallWindowProcW
SetWindowLongW
IsChild
DestroyWindow
UnregisterClassW
RegisterClassExW
DefWindowProcW
GetKeyState
ScreenToClient
GetCapture
ClientToScreen
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
GetCursorPos
SetCapture
LoadCursorW
GetForegroundWindow

d3d11

D3D11CreateDeviceAndSwapChain

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xlength_error@std@@YAXPBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??1?$codecvt@_SDU_Mbstatet@@@std@@MAE@XZ
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@I@Z
?out@?$codecvt@_SDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_S1AAPB_SPAD3AAPAD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

msvcp140_codecvt_ids

?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

xinput1_4

ord2
ord4

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
__CxxFrameHandler3
_except_handler4_common
__current_exception_context
__current_exception
memcpy
__std_exception_copy
__std_exception_destroy
strstr
memmove
memchr
__std_terminate
memset

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-stdio-l1-1-0

ftell
__acrt_iob_func
freopen_s
__stdio_common_vsprintf_s
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
fflush
fclose
fseek

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_cexit
terminate
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
system

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

_libm_sse2_acos_precise
_libm_sse2_cos_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_CIfmod
_libm_sse2_sqrt_precise
ceil
floor
_libm_sse2_sin_precise

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ad4d00e3b1c4d820aa609ce060412d5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

d3d11

msvcp140

msvcp140_codecvt_ids

imm32

d3dcompiler_47

xinput1_4

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 1KB - Virtual size: 245KB

.detourc Size: 4KB - Virtual size: 4KB

.detourd Size: 512B - Virtual size: 12B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 131KB - Virtual size: 131KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 1KB - Virtual size: 245KB

.detourc
Size: 4KB - Virtual size: 4KB

.detourd
Size: 512B - Virtual size: 12B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 131KB - Virtual size: 131KB